Detection Engineer

Role overview

Detection Engineer at Capgemini

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible.

Responsibilities

• Conduct threat hunting, incident investigations, and deep-dive security analysis across Windows, Linux, Azure, and Microsoft 365 environments.
• Perform threat emulation and detection validation using tools such as Atomic Red Team and Caldera to continuously assess and strengthen the organization's detection posture.

Employment details

• Location: Bangalore [Pune] [Navi Mumbai] [Chennai (ex Madras)] [Noida] [Kolkata (ex Calcutta)] [Gurgaon] [Hyderabad] [India]

About the employer

• What you will love working in Capgemini Design, develop, and optimize detection use cases using Microsoft KQL to proactively identify, detect, and respond to cybersecurity threats.
• The Group reported 2024 global revenues of €22.1 billion.

Additional role details

• Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
• Your Role Design, develop, and optimize detection use cases using Microsoft KQL to identify and respond to cyber threats proactively.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to create, enhance, and validate detection coverage while identifying security gaps.
• Develop SOAR playbooks, automation workflows, dashboards, reports, and visualizations to improve SOC operational efficiency and response capabilities.
• Your Profile 4+ years of experience in detection engineering, developing and tuning detection use cases using Microsoft KQL across enterprise environments.
• Strong knowledge of cybersecurity domains including threat intelligence, incident response, endpoint security, cloud security, identity management, and vulnerability management.
• Hands-on experience investigating security incidents, conducting threat hunting, and mapping detections to the MITRE ATT&CK framework to identify and address security gaps.
• Proficient in Microsoft Sentinel, Azure, Microsoft 365 Security, Defender suite, and security automation using PowerShell and Python.
• Experience creating analysis playbooks, performing malware analysis and threat emulation, and leveraging tools such as Atomic Red Team, Caldera, and AttackIQ to strengthen detection capabilities.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to enhance detection coverage, validate use cases, and identify security gaps.
• Clear career progression paths from engineering roles to architecture and consulting.
• Be part of mission-critical projects that ensure security, compliance, and operational efficiency for Fortune 500 clients.
• Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value.
• We imagine the future of organizations and make it real with AI, technology and people.
• With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries.
• We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.
• Make it real | www.capgemini.com