Deloitte Walk-in Drive for Graduates – Career Interviews for Graduates in Deloitte

Job Role: Cyber security

Experience: 4 – 6 Years

Qualifications: Any Graduates

Job Location: Gurugram

Salary: Best in Industry

Job Description:

The Detection Engineering – SIEM Platform Engineer is responsible for designing, deploying, maintaining, and optimizing SIEM platforms to support highfidelity security detection and response. This role partners closely with SOC, Threat Detection, and Incident Response teams to ensure scalable log ingestion, performant searches, and reliable detection use cases across multiple platforms such as IBM QRadar, Google SecOps (Chronicle), and other SIEM technologies.

• Design, develop, and maintain security detection use cases across SIEM platforms aligned to threat models and MITRE ATT&CK.
• Write and optimize detection logic using SIEM query languages (e.g., QRadar AQL, Google SecOps UDM Search).
• Continuously tune detections to reduce false positives, improve fidelity, and align alerting with SOC workflows.
• Own the full detection lifecycle including ideation, testing, validation, production deployment, and retirement.
• Partner with SOC and Incident Response teams to validate detections through incidents, threat hunts, and purpleteam activities.
• Perform detection gap analysis and prioritize new detections based on threat intelligence, risk and business impact.
• Ensure alerts include appropriate context, enrichment, severity, and investigation guidance.
• Maintain detection documentation, threat coverage mapping, and usecase rationale.
• Support integrations between SIEM and security telemetry sources such as EDR, cloud platforms, IAM, network, AD, DNS, Proxy, FWs, SaaS tools etc.
• Validate log quality, parsing, normalization, and schema mappings to ensure detection logic works as intended.
• Assist in troubleshooting detection-related data and integration issues (missing logs, incorrect fields, latency).
• Provide detection-driven feedback on SIEM platform capabilities, limitations, and content improvements.
• Contribute to documentation related to data requirements, integrations, and detection dependencies.

Required Professional Experience

• Overall experience of 4-6 years in detection engineering, security analytics with hands-on responsibility for building and maintaining security detections.
• Strong understanding of attack techniques, adversary behaviour, TTPs and the cyber kill chain, with the ability to translate threats into actionable detection logic.
• Proven experience developing, tuning, and operationalizing detections using SIEM platforms such as QRadar, Google SecOps (Chronicle), or similar technologies.
• Solid knowledge of security telemetry across endpoint, network, identity, cloud, and SaaS environments, including log formats and normalization concepts.
• Experience mapping detections to MITRE ATT&CK and performing detection gap analysis.
• Familiarity with detection enrichment, alert tuning, and false-positive reduction to support efficient SOC investigations.
• Exposure to threat intelligence integration within detections will be a value addition (use of IOCs, TTPs, contextual threat data).