SOC - Detection Engineer

Role overview

SOC - Detection Engineer at Capgemini

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible.

Responsibilities

• Create, test, validate, tune, and maintain detection logic using KQL, Python, PowerShell, and detection-as-code methodologies while minimizing false positives and improving detection effectiveness.
• Conduct threat hunting, attack emulation, behavioral analytics, and continuous detection coverage assessments while maintaining detection lifecycle governance, quality metrics, release management, and ongoing enhancements.
• You will also get personalized career guidance from our leaders.

Employment details

• If you have expertise in Microsoft Sentinel, Defender XDR, KQL, Python, Threat Hunting, and Detection Engineering , apply now for Pan India location candidates with 9-12 years of experience.
• Location: Gurgaon [Hyderabad] [Kolkata (ex Calcutta)] [Navi Mumbai] [Noida] [Pune] [Bangalore] [Chennai (ex Madras)] [India]

About the employer

• What you will love working in Capgemini You can shape your career with us.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.
• The Group reported 2024 global revenues of €22.1 billion.

Benefits

• You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.

Additional role details

• Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
• Your Role We're hiring a SOC – Detection Engineer to strengthen enterprise-scale security detection and threat hunting capabilities!
• Join us in building advanced, scalable, and effective security detection capabilities across modern enterprise environments.
• Design, develop, and continuously improve detection use cases, analytics rules, correlation logic, anomaly detection models, threat hunting queries, dashboards, and watchlists across Microsoft Sentinel, Defender XDR, and related security platforms.
• Translate threat intelligence, incident findings, red/purple team outcomes, emerging threats, and business risks into prioritized detection requirements aligned with organizational security objectives and MITRE ATT&CK coverage.
• Collaborate with SOC, Data Onboarding, and Security Automation teams to ensure telemetry readiness, SOAR integration, operational validation, documentation, and successful production deployment of detections.
• Your Profile Experience in Detection Engineering, Threat Hunting, and Security Analytics with demonstrated ownership of the end-to-end detection lifecycle, content validation, and cross-domain threat detection capabilities.
• Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, Azure Data Explorer (ADX), KQL, Python, PowerShell, and detection engineering best practices, including analytics development, tuning, testing, and operationalization of security content.
• Hands-on experience with CI/CD, Git, Infrastructure-as-Code (IaC), Detection-as-Code, testing automation, content repositories, platform integrations, peer review processes, and detection release management within SOC environments.
• Experience working with Azure Data Explorer, Databricks, Jupyter/iPython Notebooks, MSTICPy, security data science, statistical/ML analytics, and data engineering concepts to develop and operationalize advanced hunting, anomaly detection, and behavioral analytics use cases.
• Proven experience with attack emulation and detection validation frameworks such as Atomic Red Team, Caldera, Prelude, AttackIQ, Sigma, YARA/YARA-L, as well as fraud, identity, cloud, SaaS, OT, data leakage, and network anomaly detection use cases.
• We offer a range of career paths and internal opportunities within Capgemini group.
• Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value.
• We imagine the future of organizations and make it real with AI, technology and people.
• With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries.
• We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.
• Make it real | www.capgemini.com