Cybersecurity Assurance & Threat Detection Engineer

Greetings from EvonSys....

We are looking for Cybersecurity Assurance & Threat Detection Engineer.

1. Role Summary

We are seeking a Cybersecurity Assurance & Threat Detection Engineer to strengthen our Security Operations and Cybersecurity Assurance capabilities while supporting our growing Managed Services / MSP portfolio.

This is a blended cybersecurity role spanning security monitoring, SIEM analysis, threat detection and detection engineering, security assurance, technical security reviews, audit support, threat modelling, security architecture and design reviews, and secure SDLC activities.

The successful candidate will be comfortable moving beyond basic alert monitoring and will investigate whether security findings represent genuine risk, false positives, configuration weaknesses or areas requiring remediation. The role bridges reactive security engineering and proactive assurance ensuring defences are resilient against modern adversaries while meeting regulatory and customer .commitments.

The role works closely with Security Operations, Compliance/GRC, Service Desk, Platform and Cloud Engineering, DevOps, application development teams and MSP customer stakeholders.

Key Skills:

Security Operations & Threat Detection ,

Detection Engineering & Automation

Security Assurance & Technical Reviews

Threat Modelling

Audit, Compliance & Assurance Support

Vulnerability & Security Finding Analysis

Secure SDLC & Application Security

MSP / Customer Security Support

Required Experience & Qualifications

• Approximately 3 to 4 years of hands-on cybersecurity experience.
• Practical experience in a SOC, security engineering, security assurance or similar technical cybersecurity role.
• Demonstrated experience investigating security alerts and security incidents.
• Ability to analyze SIEM alerts and confidently identify false positives.
• Experience performing technical security assessments.
• Sound understanding of cybersecurity architecture and system design principles.
• Exposure to vulnerability management and remediation processes.
• Working understanding of threat modelling concepts.
• Experience supporting security audits or technical control assessments.
• Good understanding of networking, operating systems, cloud platforms and identity technologies.
• Strong written and verbal communication skills in English.

Technical Knowledge

Candidates should have practical experience across several of the following domains:

Detection & Monitoring: SIEM platforms, security event investigation, log analysis, EDR/XDR, detection engineering, SIEM rule development and tuning, incident response

Cloud & Infrastructure: Azure and AWS security, cloud configuration review, network security, operating systems, container and Kubernetes security

Identity & Access: IAM, PAM, authentication and authorization models, access reviews

Assurance & Governance: Security architecture review, threat modelling, security control testing, ISO/IEC 27001, ISO/IEC 27701, SOC 2, NIST CSF, CIS Benchmarks

Application Security: Secure SDLC, SAST, SCA, DAST, secrets scanning, IaC scanning, API security

Tooling (advantageous): Microsoft Sentinel, Microsoft Defender/Entra, SentinelOne, Wazuh, Rapid7, Nessus, Snyk, SonarQube, Checkmarx, Aikido Security or equivalent

Regards,

Venu