Cyber Security Architect

Job Title : Cyber Security Architect / SIEM Detection Engineering Lead

Experience : 10 - 15 Years

Location : Hyderabad

Employment Type : Full Time

Job Description :

We are looking for a highly experienced Cyber Security Architect / SIEM Detection Engineering Lead to join our Cyber Defense and SOC Engineering team.

The ideal candidate should possess deep expertise in SIEM Engineering, Threat Detection, SOC Operations, Incident Response, Threat Hunting, and Security Automation across enterprise-scale environments.

This role requires strong hands-on experience in architecting security monitoring solutions, building advanced detection use cases, leading SOC transformation initiatives, and driving automation and response maturity programs.

Key Responsibilities :

- Design, implement, and optimize enterprise SIEM and SOC solutions.

- Lead Detection Engineering initiatives including:

1. Use case development

2. Correlation rule creation

3. MITRE ATT&CK mapping

4. Threat detection strategies

5. Detection gap analysis

- Architect and manage SIEM platforms such as :

1. IBM QRadar

2. Microsoft Sentinel

3. Exabeam

4. FortiSIEM

5. Sumo Logic

6. Wazuh

- Lead advanced Threat Hunting operations using :

1. Endpoint telemetry

2. Network telemetry

3. Cloud telemetry

- Develop and optimize detection rules using :

1. YARA

2. SIGMA

- Implement SOAR and Incident Response automation using :

1. Cortex XSOAR

2. IBM Resilient

3. FortiSOAR

- Automate incident response workflows using Python scripting and orchestration tools.

- Manage log source onboarding, normalization, parsing (DSM), and enrichment activities.

- Lead incident response activities including :

1. Investigation

2. Containment

3. Root cause analysis

- Post-incident reviews

- Collaborate with stakeholders on cybersecurity governance, compliance, and security strategy initiatives.

- Mentor SOC analysts and security engineering teams on best practices and operational excellence.

Mandatory Skills :

Strong expertise in :

- Cyber Security Operations

- SIEM Engineering

- Detection Engineering

- Threat Hunting

- Incident Response

- SOC Operations

Hands-on experience with :

- IBM QRadar

- Microsoft Sentinel

- Exabeam

- FortiSIEM

- Wazuh

- Sumo Logic

Strong understanding of :

- MITRE ATT&CK Framework

- Threat Intelligence

- Security Monitoring

- Correlation Rule Tuning

- False Positive Reduction

Experience with :

- SOAR platforms

- Python scripting

- Security orchestration

- Log source integration

- SIEM tuning

Strong exposure to :

- AWS

- Azure

- GCP security monitoring

Preferred Skills :

- Experience in MSSP or enterprise SOC environments.

- Knowledge of EDR/XDR technologies.

- Strong stakeholder management and communication skills.

- Experience leading SOC modernization and automation initiatives.

Relevant certifications preferred :

- IBM QRadar SIEM Certification

- CEH

- CPTS

- Other cybersecurity certifications