Detection Engineer

Job description

At Securonix, we’re on a mission to secure the world by staying ahead of cyber threats, reinforcing all layers of our platform with AI capabilities. Our Securonix Unified Defense SIEM provides organizations with the first and only AI-Reinforced solution built with a cybersecurity mesh architecture on a highly scalable data cloud. Enhanced by Securonix EON ’s AI capabilities, our innovative cloud-native solution delivers a seamless CyberOps experience, empowering organizations to scale their security operations and keep up with evolving threats. Recognized as a five-time leader in the Gartner Magic Quadrant for SIEM and highly rated on Gartner Peer Insights , our award-winning Unified Defense SIEM provides organizations with 365 days of ‘hot’ data for rapid search and investigation, threat content-as-a-service, proactive defense through continuous peer and partner collaboration, and a fully integrated Threat Detection, Investigation, and Response (TDIR) experience—all within a single platform. Built on a cloud-native architecture, the platform leverages the Snowflake Data Cloud for unparalleled scalability and performance. Securonix is proud to be a cybersecurity unicorn and featured in CRN's 2024 Security 100 list . Backed by Vista Equity Partners , one of the largest private equity firms with over $100 billion in assets under management, we have a unique advantage in driving innovation and growth. With a global footprint, we serve more than 1,000 customers worldwide , including 10% of the Fortune 100 . Our network of 150+ partners and Managed Security Service Providers (MSSPs) enables us to deliver unmatched security solutions on a global scale. At Securonix, we are driven by our core values and place our people at the heart of everything we do: Winning as One Team : We work together with universal respect to achieve aligned outcomes Customer Driven Innovation : We innovate to stay ahead of the market and create value for our customers Agility in Action : We embrace change and are unified in our purpose and objectives amidst change Join us as we redefine cybersecurity, innovate fearlessly, and grow together as one team. Role Summary: We are looking for an early-career Security Content Engineer to join the Detection Engineering team. This role is suitable for recent graduates or candidates with up to one year of experience who have strong analytical skills, basic coding or scripting knowledge, and an interest in cybersecurity. Need someone with strong analytical skills, a coding or scripting background, and preferably some exposure to cybersecurity concepts, log analysis, or SIEM platforms. You will work with experienced Detection Engineers to support, test, and develop security detection content for the Securonix platform. The role requires curiosity, attention to detail, structured problem-solving, and the ability to analyze logs to identify suspicious or malicious activity. Responsibilities: Shadow Detection Engineers and assist with L1 support for customer queries related to detection content. Analyze logs from different security technologies to identify patterns, anomalies, and suspicious behavior. Assist in creating, updating, and tuning detection content based on team guidance. Support the development of policies, threat models, dashboards, and reports within the Securonix platform. Perform quality assurance testing of detection content before production release. Validate detection logic using sample logs, test cases, and documented attack scenarios. Document detection logic, assumptions, test results, and known limitations clearly. Stay updated on emerging threats, threat research, detection techniques, and community-published security content. Collaborate with Detection Engineers to improve detection accuracy and reduce false positives. Required Qualifications: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent practical knowledge. Strong analytical and problem-solving skills. Basic understanding of operating systems, networking concepts, and security fundamentals. Ability to read and analyze logs from systems, applications, network devices, or security tools. Basic scripting or automation skills, preferably using Python. Good written and verbal communication skills. Willingness to learn detection engineering, SIEM concepts, and threat detection methodologies. Preferred Qualifications: Basic understanding of cybersecurity concepts such as malware, phishing, lateral movement, privilege escalation, and data exfiltration. Familiarity with SIEM platforms or log management tools. Awareness of MITRE ATT&CK tactics and techniques. Exposure to JSON, regex, SQL, APIs, or data parsing. Academic projects, internships, labs, certifications, or hands-on practice related to cybersecurity, log analysis, or scripting. Benefits: As a full-time employee with Securonix, you will be eligible for the following employee benefits: Health Insurance with a total sum insured is INR 7,50,000 Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law Personal Accident with total sum insured is INR 10,00,000 Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered. Securonix, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, amnesty or status as a covered veteran in accordance with applicable federal, state and local laws. Securonix complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence, compensation and training. Securonix expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, national origin, age, genetic information, disability or veteran status. Improper interference with the ability of Securonix employees to perform their expected job duties is absolutely not tolerated.