Assistant Vice President

Assistant Vice President SCRAT Engineer

Location: Bengaluru
Experience: 9+ Years
Employment Type: Full-time

Job Overview

We are looking for an experienced Threat Detection & Response / SCRAT Engineer to join our Security Operations function. The role will be responsible for designing, developing, implementing, and continuously improving security detection and response use cases aligned with global cybersecurity frameworks.

The ideal candidate will have strong hands-on experience in Splunk/SIEM, SOC operations, security content development, use-case creation, threat detection, incident investigation, and response, along with a strong understanding of cyber attack techniques and frameworks.

Key Responsibilities

• Design, develop, implement, and optimize advanced security detection and response use cases.
• Develop and maintain security content, correlation rules, alerts, dashboards, and detection logic using Splunk/SIEM.
• Perform Splunk integration and development activities across multiple security data sources.
• Collaborate with Threat Intelligence, Incident Response, Forensics, and Security Operations teams to develop effective detection strategies.
• Analyze cyber threats, attack patterns, Tactics, Techniques, and Procedures (TTPs) to identify malicious activities.
• Develop detection strategies aligned with MITRE ATT&CK, Cyber Kill Chain, and other cybersecurity frameworks.
• Perform security event monitoring, investigation, threat analysis, and incident response.
• Correlate and pivot across multiple datasets to identify and investigate security incidents.
• Identify detection gaps and continuously enhance existing security use cases.
• Participate in threat hunting, red team, and penetration testing exercises to validate and improve detection capabilities.
• Support automation and integration initiatives across SIEM, SOAR, UEBA, EDR, DLP, and other security platforms.
• Monitor emerging threats and attack vectors and incorporate relevant intelligence into detection strategies.
• Develop security metrics, trends, dashboards, and management reports for leadership and cross-functional stakeholders.
• Provide technical guidance and mentorship to junior security analysts as required.

Required Skills & Experience

• 9+ years of overall experience in Information Security / Cybersecurity / IT.
• 3–4 years of hands-on SOC experience.
• Strong hands-on experience with Splunk / SIEM platforms.
• Strong experience in Splunk Integration and Development.
• Hands-on experience in Security Content Development and Use Case Creation.
• Experience designing and tuning detection rules, correlation searches, alerts, dashboards, and security content.
• Strong understanding of Threat Detection & Response and Security Operations.
• Experience in security event monitoring, investigation, and incident response.
• Good knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience with SIEM, SOAR, UEBA, EDR, DLP, and other security technologies.
• Strong understanding of common cyber attack methods, TTPs, and offensive security concepts.
• Ability to correlate and analyze multiple datasets to investigate security events.
• Strong analytical, problem-solving, and investigative skills.
• Experience with network-based security controls such as Firewalls, IPS, WAF, Proxy, VPN, etc.
• Knowledge of host and network forensics, operating systems, web applications, and network traffic analysis.
• Exposure to cloud, database, application, and mobile security.
• Experience developing security metrics, trends, dashboards, and management reports.
• Understanding of information security risk management, audits, reviews, and risk assessments.

Preferred Skills

• Experience in the Financial Services / Banking industry.
• Experience with Threat Hunting and Threat Intelligence.
• Experience in security automation.
• Experience participating in Red Team / Penetration Testing activities.
• Knowledge of digital, host, and network forensics.
• Experience mentoring or leading junior security analysts.
• Strong understanding of security governance, risk management, and incident response processes.

Preferred Certifications

• Splunk Certification
• CISSP / ISSMP
• GSEC / GCIH / GCFA / GNFA
• GIAC certifications
• Other relevant Cybersecurity certifications

Key Skills

Splunk | SIEM | SOC | Threat Detection & Response