NetEnrich - Cyber Security Engineer - SIEM Framework (3-4 yrs)

About Company :

Netenrich boosts the effectiveness of organizations' security and digital operations so they can avoid disruption and manage risk. Resolution Intelligence CloudTM is our native-cloud data analytics platform for enterprises and services providers that need highly scalable, multitenant security operations and/or digital operations management.

Resolution Intelligence Cloud transforms security and operations data into intelligence that organizations can act on before critical issues occur. More than 3,000 customers and managed service providers rely on Netenrich to deliver secure operations at scale.

Job Title : Cybersecurity Data/ Detection/ Implementation Engineer (Senior Analyst/Leads)

Years of Experience : 3+ Years

Work Location : Hyderabad/Bangalore

Job Summary :

We are seeking a skilled and experienced Cybersecurity Detection and Implementation Engineer with expertise in YARA rules creation, playbook implementation, and data ingestion techniques. This role presents an exciting opportunity to contribute to the design and implementation of cutting-edge cybersecurity solutions while collaborating with a talented team of professionals.

Responsibilities :

- Design, develop, and maintain YARA rules for threat detection and malware analysis, ensuring high accuracy and effectiveness.

- Conduct research and analysis to identify emerging threats and vulnerabilities and develop proactive detection mechanisms.

- Identify and implement detection use cases based on emerging threats and TTPs using MITRE ATT&CK framework.

- Contribute to optimization of detection rules to eliminate false positives and improve detection efficiency.

- Collaborate with cross-functional teams to understand customer requirements and customize cybersecurity solutions to meet their needs.

- Participate in security incident response activities, providing technical expertise and support as needed.

- Stay abreast of the latest cybersecurity trends, technologies, and best practices, and share knowledge with the team.

- Work closely with customers to understand their security challenges and requirements and provide expert guidance and support.

Qualifications :

- Bachelor's degree in computer science, Information Security, or related field.

- 3 years of experience in cybersecurity, with a focus on detection engineering and implementation.

- Proficiency in creating and maintaining YARA rules for threat detection and malware analysis.

- Solid understanding of MITRE ATT&CK framework and developing detection rules based on it.

- Solid understanding of data ingestion techniques and technologies, including log management systems and data lakes.

- Knowledge and experience in developing use cases for Cloud, Identity, Endpoint and Data Exfiltration use cases.

- Hands-on experience with SIEM (Security Information and Event Management) solutions such as Splunk, ELK, or QRadar.

- Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues.

- Strong communication and interpersonal skills, with the ability to effectively collaborate with internal teams and customers.

- Relevant cybersecurity certifications (i.e., CISSP, CEH, GIAC) are a plus