HYDERABAD · FULLTIME
Security Detection Engineer III
F5 Networks
Hyderabad · onsite · Posted 56d ago
Sourced from
Undisclosed5–10 yrsfulltimeHyderabad
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.8s
- Found the form on Naukri · 15 questions to answer1.8s
- Decided the answers for all of them2.1s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Summary
The Security Engineer III, Detection Engineering is a career-level security engineering professional responsible for developing, testing, deploying, and continuously improving detection capabilities that support Security Operations. As part of the Security Operations Platform Engineering (SOPE) team, this role focuses on transforming threat intelligence, telemetry, and security requirements into reliable, actionable detections that improve visibility and reduce organizational risk. The engineer partners closely with Incident Response, Threat Intelligence, Logging Engineering, and platform engineering teams to build scalable, threat-driven detection capabilities while advancing automation, detection coverage, and operational maturity.
Primary Responsibilities - Develop and maintain custom detections using Detection-as-Code practices, including version control, peer review, testing, and CI/CD deployment workflows.
- Analyze and improve detection coverage by mapping telemetry and detections to adversary behaviors and the MITRE ATT&CK framework, identifying gaps and prioritizing enhancements.
- Partner with Incident Response, Threat Intelligence, Logging Engineering, and security platform teams to translate emerging threats, investigations, and telemetry into actionable detection content.
- Validate and tune detections through adversary emulation, atomic testing, purple-team exercises, and production feedback to improve signal quality and reduce false positives.
- Automate and optimize detection engineering workflows, alert enrichment processes, and operational activities to improve efficiency and scalability.
- Support onboarding of new log sources and security telemetry by collaborating with engineering and infrastructure teams to establish detection coverage across new environments and technologies.
- Create and maintain detection documentation, runbooks, coverage assessments, and technical standards while participating in an engineering on-call rotation.
- Help define detection strategy for AI and agentic systems (prompt injection, tool and function abuse, agent identity and credential misuse, data exfiltration via model outputs), and explore using AI to accelerate detection engineering workflows.
- Bachelor's degree in Information Security, Computer Science, Engineering, or related field, or equivalent practical experience.
- 5+ years of experience in cybersecurity, security engineering, detection engineering, security operations, threat hunting, or a related discipline.
- Experience developing, tuning, or maintaining detections within a SIEM, EDR, log analytics, or security monitoring platform.
- Experience with scripting, automation, or data analysis using Python, PowerShell, SQL, KQL, SPL, or similar technologies.
- Strong understanding of attacker techniques, detection methodologies, and frameworks such as MITRE ATT&CK.
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
- Experience implementing Detection-as-Code practices, including Git-based workflows, automated testing, and CI/CD pipelines.
- Experience with adversary emulation, atomic testing, purple-team exercises, or detection validation frameworks.
- Experience performing detection coverage analysis and developing ATT&CK-based coverage roadmaps.
- Experience onboarding log sources and building detections across cloud, endpoint, network, identity, or SaaS environments.
- Experience with platforms such as CrowdStrike, Splunk, Microsoft Sentinel, Chronicle, Elastic, or similar security technologies.
Sourced from naukri
Section · 02
Skills
Automationsecurity operationssiemthreat intelligenceIncident ResponseThreat HuntingAnalyticsPythonSAASOnboardingSQLCyber SecuritySplunkdata analysisPowershellGITArtificial Intelligence
Section · Company
About F5 Networks
F5 Networks
IT Services & Consulting
889
employees
1996
30 years old
Seattle,Washington
United States
₹29.7L PA avg
Avg at F5 Networks
About
F5 application services ensure application security and perform the way they should in any environment and on any device.
Industries
IT Services & ConsultingInternetHardware & NetworkingSoftware Product
Employee ratings
10 reviews
3.3/ 5
Culture
2.9
Career growth
2.6
Work-life
3.0
Employees rate it well for
Compensation & Benefits37Work-Life Balance36
Find them on