193 Cybersecurity jobs in Bangalore

• Monitor security systems and networks for potential threats and vulnerabilities.
• Analyze security alerts and logs to detect and investigate security incidents.
• Respond to and resolve security incidents in a timely and effective manner.
• Conduct vulnerability assessments and penetration testing.
• Develop and implement security policies, procedures, and controls.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies.
• Provide security awareness training to employees.
• Collaborate with IT teams to ensure the security of systems and applications.
• Perform regular security audits and compliance checks.
• Contribute to the continuous improvement of the organization's security posture.

• Proven experience as a Cybersecurity Analyst or in a similar role.
• In-depth knowledge of network security principles, protocols, and tools.
• Experience with SIEM, IDS/IPS, and EDR solutions.
• Familiarity with vulnerability assessment and penetration testing methodologies.
• Strong analytical and problem-solving skills.
• Excellent communication and reporting abilities.
• Relevant cybersecurity certifications (e.g., CISSP, CEH, Security+).
• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Ability to work effectively in a hybrid work environment.

Greetings from Netsach - A Cyber Security Company.

Role Summary:

We are seeking a Cybersecurity Engineer with 3-5yrs of expertise in Detection Rule Engineering , to play a pivotal role in developing a detection rule dataset for Large Language Models. The ideal candidate will have hands-on experience in creating and fine-tuning detection rules for SIEM  (Security Information and Event Management) and EDR  (Endpoint Detection and Response) systems along with proficiency in SIGMA Rule  creation and conversion. Also, the candidate is expected to have testing experience to validate the generated rules.

Job Title: Cybersecurity Engineer (Detection Rule Engineering)

Location: Noida, Chennai, Bangalore

Notice- Immediate joiners only

Experience: 3-5 yrs.

Contract duration- 6 Months to 1yrs + extension

Job Description / Responsibilities:

• Design, develop, and maintain detection rules, queries, and alerts in SIEM  (Splunk preferred) and EDR  (Microsoft Defender preferred) environments.
• Write custom SIEM and EDR queries corresponding to MITRE TTPs for comprehensive coverage.
• Test and validate the accuracy of developed SIEM and EDR queries and corresponding SIGMA rules.
• Establish a mechanism to translate EDR/SIEM queries to SIGMA rules and develop a comprehensive dataset of detection rules.
• Stay updated on the latest threats, vulnerabilities, and detection methodologies and apply them in rule creation.
• Collaborate with other stakeholders in application of Rules dataset for fine tuning of LLMs and RAG implementation. 

Communication and Documentation:

• Excellent written and oral communication, presentation, listening and interpersonal skills.
• Collaborating effectively with internal and external team.
• Excellent reporting, time management, analytical & communication skills.

Preferred Skills:  

• Exposure to RAG (Retrieval-Augmented Generation)  and fine-tuning of LLMs  for cybersecurity tasks.
• Hands-on experience with Microsoft Defender EDR  and Splunk SIEM.
• Certifications such as Splunk Certified User , Microsoft Certified: Security Operations Analyst Associate , GIAC Certified Detection Analyst (GCDA) , or equivalent.

Qualifications and Technical Skills:

• 2+ years of previous experience in Cybersecurity domain specializing in Detection Rule Engineering.
• Proven experience in creating and managing detection queries and rules in SIEM (Splunk)  and EDR (Microsoft Defender)  environments.
• Strong understanding of SIGMA rules , their use, and how to convert detection logic between different platforms.
• Experience with log analysis, threat intelligence integration, and use case development for SIEM  and EDR  systems.
• Deep knowledge of security event analysis, log aggregation, and threat detection methodologies.
• Familiarity with threat detection techniques like anomaly detection, behavior analytics, and indicator-based detection.
• Knowledge of network protocols, operating system internals, and security monitoring techniques.
• Scripting skills in languages such as Python, PowerShell, or bash for rule creation and automation.
• Strong troubleshooting and problem-solving skills.
• Familiarity with cybersecurity frameworks such as MITRE ATT&CK , Cyber Kill Chain , and NIST .

Thank You

Emily Jha

Netsach - A Cyber Security Company

• Design, implement, and manage network security infrastructure (firewalls, IDS/IPS, VPNs).
• Monitor network traffic for security breaches and suspicious activities.
• Conduct vulnerability assessments and penetration testing.
• Develop and enforce security policies and procedures.
• Respond to security incidents, conduct forensic analysis, and implement remediation measures.
• Configure and maintain security hardware and software.
• Collaborate with IT teams to ensure network security best practices are followed.
• Stay up-to-date with the latest cybersecurity threats and technologies.
• Provide security awareness training to staff.
• Develop and maintain security documentation and reports.

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3-5 years of experience in network security engineering.
• Strong knowledge of network protocols, TCP/IP, and security concepts.
• Hands-on experience with firewalls, IDS/IPS, SIEM solutions, and VPNs.
• Experience with vulnerability assessment and penetration testing tools.
• Relevant security certifications such as CISSP, CCNA Security, or CompTIA Security+ are highly desirable.
• Excellent analytical and problem-solving skills.
• Ability to work effectively in a team environment.

• Develop and maintain comprehensive cybersecurity strategies and policies.
• Design, implement, and manage security controls, including firewalls, intrusion detection/prevention systems, VPNs, and endpoint security solutions.
• Conduct regular security assessments, penetration testing, and vulnerability scans to identify potential risks.
• Lead the incident response team, developing and executing plans for detecting, analyzing, and remediating security breaches.
• Ensure compliance with relevant data protection regulations and industry standards (e.g., ISO 27001, GDPR).
• Collaborate with IT and development teams to integrate security best practices into the software development lifecycle (SDLC).
• Monitor security alerts and system logs for suspicious activities, performing in-depth analysis and taking appropriate action.
• Provide technical leadership and mentorship to junior security analysts and engineers.
• Stay abreast of the latest cybersecurity threats, trends, and technologies, recommending and implementing improvements.
• Develop and deliver security awareness training programs for employees.
• Manage relationships with third-party security vendors and service providers.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 7 years of progressive experience in cybersecurity roles.
• Demonstrated experience in network security, application security, cloud security, and endpoint protection.
• Proficiency with security technologies such as SIEM, IDS/IPS, WAF, and endpoint detection and response (EDR) solutions.
• Strong understanding of threat modeling, risk assessment, and incident response methodologies.
• Experience with scripting languages (e.g., Python, Bash) for automation is a plus.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.
• Excellent analytical, problem-solving, and communication skills.
• Ability to lead technical teams and manage complex projects.
• Experience working in a hybrid work environment.

• Design, implement, and maintain security infrastructure, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Develop and enforce security policies, standards, and procedures across the organization.
• Monitor security alerts and events, investigate potential security breaches, and lead incident response efforts.
• Develop and deliver security awareness training programs for employees.
• Stay abreast of the latest cybersecurity threats, trends, and technologies.
• Collaborate with IT and development teams to ensure security is integrated into the software development lifecycle.
• Manage and optimize security tools and technologies.
• Participate in security audits and ensure compliance with relevant regulations.
• Mentor junior security analysts and contribute to the overall security strategy.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master's degree preferred.
• Minimum of 7 years of experience in cybersecurity engineering or a related field.
• Strong understanding of network protocols, security architectures, and common attack vectors.
• Hands-on experience with SIEM (Security Information and Event Management) tools, EDR (Endpoint Detection and Response), and other security platforms.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation.
• Relevant cybersecurity certifications such as CISSP, CISM, CEH, or SANS.
• Experience with cloud security (AWS, Azure, GCP).
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong communication and leadership abilities.
• Experience in threat intelligence and incident management.