Location:Pune, Maharashtra, IndiaJob ID: R0102771Date Posted:2025-08-14Company Name:HITACHI INDIA PVT. LTDProfession (Job Category):OtherJob Schedule: Full timeRemote:NoJob Description:Job Title: SIEM Detection EngineerDesignation: EngineerCompany: Cumulus Systems Pvt. Ltd.Location: Pune, IndiaSalary: As per IndustryCompany Overview:Cumulus Systems engages in providing End-to-End Software Development Lifecycle involving Business &amp; Requirements Analysis, Solution Architecture &amp; Design, Development, Testing, Deployment and Postproduction Support. Its cross-domain storage performance management platform called MARS (Measure Analyze Recommend Solve) monitors and helps manage large-scale, heterogeneous IT infrastructure across the entire enterprise.Position Overview:As an L2 Detection Specialist, you will design, test, and maintain high-fidelity detection content in one of the following SIEM platforms—Microsoft Sentinel (KQL) or Google Security Operations (YARA-L). Partnering closely with SOAR engineers, SOC analysts, and solutions engineers, you will perform proactive threat hunting, fine-tune alert logic, and ensure our global SOC can rapidly identify and respond to emerging threats.Job Roles &amp; Responsibilities:<ul><li>Design, build, and maintain detection rules, correlation searches, dashboards, and reports in one or more of the specialized SIEM platform.</li><li>Continuously validate and tune detection logic through simulations, red-team findings, SOC false positives and live incident feedback.</li><li>Analyze log and telemetry data to uncover suspicious behaviors, patterns, and indicators of compromise; develop new signatures accordingly.</li><li>Integrate external threat-intelligence feeds (IoCs and TTPs) to enrich alerts and broaden detection coverage.</li><li>Leverage MITRE ATT&amp;CK and other frameworks to guide prioritization and detection development methodology.</li><li>Perform periodic rule health checks, adjusting thresholds to maximize fidelity and minimize false positives.</li><li>Collaborate with SOAR engineers to automate enrichment, triage, and response actions that stem from SIEM alerts.</li><li>Conduct hypothesis &amp; threat intelligence driven threat hunts to identify advanced attacker techniques not yet covered by automated detections.</li><li>Generate clear, actionable metrics and trend reports for SOC leadership, highlighting alert volumes, rule efficacy, and tuning outcomes. Maintain detection KPIs to measure alert accuracy.</li><li>Document all detection logic, tuning rationales, and operational procedures to support audit, compliance, and knowledge transfer.</li><li>Provide technical consultation during incident investigations and post-incident retrospectives, identifying detection gaps and recommending improvements.</li></ul>Skills:<ul><li>Strong understanding of MITRE ATT&amp;CK and its practical application to detection engineering.</li><li>Familiarity with cloud infrastructures (Azure, GCP, AWS) and the security logs they generate.</li><li>Proficiency in scripting for automation (Python or PowerShell preferred).</li><li>Working knowledge of common security controls and telemetry sources—firewalls, IDS/IPS, EDR, endpoint protection, cloud logs, etc.</li><li>Relevant certifications (any of): Admin · SC-200 (Microsoft Sentinel) · Google SecOps Certified · CompTIA Security+ · GCP / Azure / AWS Foundational.</li><li>Excellent written documentation skills and the ability to convey complex detection concepts to both technical and non-technical stakeholders.</li></ul>Experience: Minimum 3 years overall experience in cybersecurity operations or engineering.At least 1–2 years hands-on experience building detections in one of the following SIEMs: Microsoft Sentinel (KQL) or Google SecOps (YARA-L).Nice-to-Have<ul><li>Experience integrating SOAR playbooks with SIEM alerts.</li><li>Prior involvement in purple-team exercises or red-team simulations.</li><li>Knowledge of additional query or signature languages (e.g., Sigma, Elastic Query DSL).</li><li>Scripting Knowledge (Python, Powershell)</li><li>Data Analytics &amp; Reporting Expertise in Microsoft PowerBI, Tableau or equivalents.</li></ul>

Hitachi Energy is a global technology leader that is advancing a sustainable energy future for all. We serve customers in the utility, industry and infrastructure sectors with innovative solutions and services across the value chain. Together with customers and partners, we pioneer technologies and enable the digital transformation required to accelerate the energy transition towards a carbon-neutral future. We are advancing the world&rsquo;s energy system to become more sustainable, flexible and secure whilst balancing social, environmental and economic value. Hitachi Energy has a proven track record and unparalleled installed base in more than 140 countries.

SIEM Detection Engineer - Cumulus Systems Pvt. Ltd.

Location:Pune, Maharashtra, IndiaJob ID: R0102771Date Posted:2025-08-14Company Name:HITACHI INDIA PVT. LTDProfession (Job Category):OtherJob Schedule:&nbsp;Full timeRemote:NoJob Description:Job Title:&nbsp;SIEM Detection EngineerDesignation:&nbsp;EngineerCompany:&nbsp;Cumulus Systems Pvt. Ltd.Location:&nbsp;Pune, IndiaSalary: As per IndustryCompany Overview:Cumulus Systems engages in providing End-to-End Software Development Lifecycle involving Business &amp; Requirements Analysis, Solution Architecture &amp; Design, Development, Testing, Deployment and Postproduction Support. Its cross-domain storage performance management platform called MARS (Measure Analyze Recommend Solve) monitors and helps manage large-scale, heterogeneous IT infrastructure across the entire enterprise.Position Overview:As an L2 Detection Specialist, you will design, test, and maintain high-fidelity detection content in one of the following SIEM platforms—Microsoft Sentinel (KQL) or Google Security Operations (YARA-L). Partnering closely with SOAR engineers, SOC analysts, and solutions engineers, you will perform proactive threat hunting, fine-tune alert logic, and ensure our global SOC can rapidly identify and respond to emerging threats.Job Roles &amp; Responsibilities:<ul><li>Design, build, and maintain detection rules, correlation searches, dashboards, and reports in one or more of the specialized SIEM platform.</li><li>Continuously validate and tune detection logic through simulations, red-team findings, SOC false positives and live incident feedback.</li><li>Analyze log and telemetry data to uncover suspicious behaviors, patterns, and indicators of compromise; develop new signatures accordingly.</li><li>Integrate external threat-intelligence feeds (IoCs and TTPs) to enrich alerts and broaden detection coverage.</li><li>Leverage MITRE ATT&amp;CK and other frameworks to guide prioritization and detection development methodology.</li><li>Perform periodic rule health checks, adjusting thresholds to maximize fidelity and minimize false positives.</li><li>Collaborate with SOAR engineers to automate enrichment, triage, and response actions that stem from SIEM alerts.</li><li>Conduct hypothesis &amp; threat intelligence driven threat hunts to identify advanced attacker techniques not yet covered by automated detections.</li><li>Generate clear, actionable metrics and trend reports for SOC leadership, highlighting alert volumes, rule efficacy, and tuning outcomes. Maintain detection KPIs to measure alert accuracy.</li><li>Document all detection logic, tuning rationales, and operational procedures to support audit, compliance, and knowledge transfer.</li><li>Provide technical consultation during incident investigations and post-incident retrospectives, identifying detection gaps and recommending improvements.</li></ul>Skills:<ul><li>Strong understanding of MITRE ATT&amp;CK and its practical application to detection engineering.</li><li>Familiarity with cloud infrastructures (Azure, GCP, AWS) and the security logs they generate.</li><li>Proficiency in scripting for automation (Python or PowerShell preferred).</li><li>Working knowledge of common security controls and telemetry sources—firewalls, IDS/IPS, EDR, endpoint protection, cloud logs, etc.</li><li>Relevant certifications (any of): Admin · SC-200 (Microsoft Sentinel) · Google SecOps Certified · CompTIA Security+ · GCP / Azure / AWS Foundational.</li><li>Excellent written documentation skills and the ability to convey complex detection concepts to both technical and non-technical stakeholders.</li></ul>Experience: Minimum 3 years overall experience in cybersecurity operations or engineering.At least 1–2 years hands-on experience building detections in one of the following SIEMs: Microsoft Sentinel (KQL) or Google SecOps (YARA-L).Nice-to-Have<ul><li>Experience integrating SOAR playbooks with SIEM alerts.</li><li>Prior involvement in purple-team exercises or red-team simulations.</li><li>Knowledge of additional query or signature languages (e.g., Sigma, Elastic Query DSL).</li><li>Scripting Knowledge (Python, Powershell)</li><li>Data Analytics &amp; Reporting Expertise in Microsoft PowerBI, Tableau or equivalents.</li></ul>

SIEM Detection Engineer - Cumulus Systems Pvt. Ltd.

About the Job

About the Company

HITACHI ENERGY

Similar Jobs

IT Security Operations Analyst

IT Security Operations Analyst

Cybersecurity Certifications Specialist

Cybersecurity Certifications Specialist

Threat Detection Engineer (Cyber)

Threat Detection Engineer (Cyber)

Cybersecuity GRC Analyst

Cybersecuity GRC Analyst

Supplier Cyber Assessor

Supplier Cyber Assessor

Senior Customer Cybersecurity Advisor

Senior Customer Cybersecurity Advisor

Director, Cybersecurity Architecture

Director, Cybersecurity Architecture

Security Analyst

Security Analyst

Cybersecurity Engineer

Cybersecurity Engineer

Lead Engineer - Network

Lead Engineer - NetworkNew