threat detection engineer
CRED · Bengaluru, India
About the role
Own threat detection and incident response across cloud, endpoint, identity, and network telemetry. Build high-fidelity detection use cases, automate response workflows, and lead incident response with root-cause analysis. Requires 2–6 years in information security focused on threat detection and response.
What you'll do
- Detect and respond to internal and external security threats across infrastructure, cloud, and data
- Design, build, and tune high-fidelity detection use cases using cloud, endpoint, identity, and network telemetry
- Lead and participate in incident response, root-cause analysis, and preventive improvements
- Automate incident response workflows with playbooks and orchestration
- Build in-house security analytics using open-source tools for log parsing and event correlation
- Conduct threat hunting using adversary TTPs and support compliance efforts (PCI DSS, ISO 27001)
What they're looking for
- 2–6 years in information security with strong focus on threat detection and response
- Hands-on threat detection across cloud (AWS preferred), endpoint (Windows/Linux/macOS), and network telemetry
- Exposure to EDR, IDS/IPS, and SIEM/centralized logging (Splunk, ELK, Sentinel, or similar)
- Proficiency in at least one of Python, Go, or Bash
- Understanding of MITRE ATT&CK, cyber kill chain, and diamond model
- Experience with threat hunting, automation, regex creation, and false-positive reduction
Key details
- Company
- CRED
- Location
- Bengaluru, India
- Work mode
- On-site
- Seniority
- Mid-level
- Role category
- Engineering
- Experience
- 2 to 6 years
- Posted
- 26 Oct 2026
- Source
- jobs.lever.co