Detection Engineer

Your Role

• Design, develop, and optimize detection use cases using Microsoft KQL to identify and respond to cyber threats proactively.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to create, enhance, and validate detection coverage while identifying security gaps.
• Conduct threat hunting, incident investigations, and deep-dive security analysis across Windows, Linux, Azure, and Microsoft 365 environments.
• Develop SOAR playbooks, automation workflows, dashboards, reports, and visualizations to improve SOC operational efficiency and response capabilities.
• Perform threat emulation and detection validation using tools such as Atomic Red Team and Caldera to continuously assess and strengthen the organization's detection posture.

Your Profile

• 4+ years of experience in detection engineering, developing and tuning detection use cases using Microsoft KQL across enterprise environments.
• Strong knowledge of cybersecurity domains including threat intelligence, incident response, endpoint security, cloud security, identity management, and vulnerability management.
• Hands-on experience investigating security incidents, conducting threat hunting, and mapping detections to the MITRE ATT&CK framework to identify and address security gaps.
• Proficient in Microsoft Sentinel, Azure, Microsoft 365 Security, Defender suite, and security automation using PowerShell and Python.
• Experience creating analysis playbooks, performing malware analysis and threat emulation, and leveraging tools such as Atomic Red Team, Caldera, and AttackIQ to strengthen detection capabilities.

What you will love working in Capgemini

• Design, develop, and optimize detection use cases using Microsoft KQL to proactively identify, detect, and respond to cybersecurity threats.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to enhance detection coverage, validate use cases, and identify security gaps.
• Clear career progression paths from engineering roles to architecture and consulting.
• Be part of mission-critical projects that ensure security, compliance, and operational efficiency for Fortune 500 clients.