Threat Detection Engineer
- Capgemini
- 8 - 13 years
- Hyderabad
- 2 months ago
- Email to a friend
- Report this job
Job Description
Role & responsibilities
Primary Skill:
Threat Intelligence, Threat Hunting, Threat Detection Engineers with experience in writing SPL (Splunk Processing Language), Mitre Framework.
Secondary Skill:
DataBricks, MDE
Threat Intelligence, Threat Hunting, Splunk Enterprise Security, Cyber Security SME, Splunk Power User, Mitre Framework
JD:
In-depth knowledge of external attacks and detection techniques to be able to run analysis of the requirements provided by threat intelligence / SOC teams, generate list of rules that could be implemented (based on self analysis of a threat and avaiable log sources), work with SOC team to operationalize and Purple Team to test..
Familiarity with MITRE ATT&CK framework and Tactics, Techniques, and Procedures (TTPs).
Experience with security tools such as Splunk, MDE , Databricks to be able to write custom detections to detect various threats (preferably MDE)
So to give you better picture, I will give some examples.
- Person needs to be able to navigate through Mitre framework to be able to assign correct technique to the rule that is worked on.
- Must be able to tell what Beaconing does or CnC channel means, methods to detect, logs to use (ofc not limited to, in general must know common attach techniques and how to detect them - external threat attacks on prem / cloud). Must be familiar with Cobalt Strike meaning (generic knowledge what it does, not how to use it).
- Manually write SPL / KQL / SQL rules in one of our tools, generated alerts and get them validated by asking Purple team to run a simulation.
- Talk to CDC on operationalizing the rule
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Cyber SecurityEmployement Type: Full timeContact Details:
Company: CapgeminiLocation(s): Hyderabad
Keyskills: Threat Detection Malware Analysis Threat Hunting
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in