Soc Detection Engineer

Airbus India Private Limited

4 to 8+ years detection engineering experience
Deep knowledge of windows unix linux telemetry
Proficiency in splunk spl and splunk es
The primary mission is to research threat actor TTPs and convert them into actionable detection rules to protect the Airbus ecosystem

Job Summary

  • The primary mission is to research threat actor TTPs and convert them into actionable detection rules to protect the Airbus ecosystem.
  • You will utilize CI/CD frameworks to deploy, test, and maintain detection logic while adopting an automation mindset.
  • The role requires mimicking real-world attacks in a lab environment to validate sensors and identify coverage gaps.

Matching Summary

The primary mission is to research threat actor TTPs and convert them into actionable detection rules to protect the Airbus ecosystem.

Skills & Requirements

Must-have

  • 4 to 8+ years Detection Engineering experience
  • Deep knowledge of Windows Unix Linux telemetry
  • Proficiency in Splunk SPL and Splunk ES
  • Strong understanding of MITRE ATT&CK framework
  • Experience with Git-based CI/CD frameworks

Nice-to-have

  • Purple team mentality for attack and defense
  • Research oriented mindset for latest attacks
  • Familiarity with Sigma YARA Snort standards
  • Some experience towards Adversary Emulation

Key Requirements

  • Bachelor's degree in Computer Science or Cybersecurity
  • 4 to 8+ years in Detection Engineering or Threat Hunting
  • Preferred certifications: OSCP, GCIA, GDAT, or Splunk Power User

Work Rights

Not specified

Tailored Resume

Cover Letter