Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
About the job
Develop, deploy and operate cybersecurity solutions (systems, assets, software, controls and services) on infrastructures and products.
Key Responsibilities:
- Designs, builds, tests, and maintains detection logic within the Use Case Factory to identify and detect threats and suspicious activities in the organization's environment.
- Develops and refines detection rules and signatures based on threat intelligence and known threat patterns, while continuously tuning and improving detections to adapt to evolving threats.
- Bridges the gap between vast data streams and actionable security insights by transforming raw log data into effective automated detection capabilities.
- Ensures that security tools effectively identify malicious or unauthorized behaviors, enabling the SOC to proactively detect and respond to security incidents while maintaining the robustness and accuracy of the detection infrastructure.
- Develop and maintain detection rules and playbooks
- Deploy cybersecurity detection and response capabilities across the SOC infrastructure
- Test and validate detection rules against various threat scenarios
- Monitor and optimize the performance of detection rule
- Implement and maintain security controls and monitoring solutions
- Provide technical expertise for security incident detection and response
- Ensure detection rules comply with organizational standards and best practices
- Troubleshoot technical issues related to detection systems and integrations
- Collaborate with SOC actors (CTI, Threat Hunting, Analysts)
- Document and maintain operational procedures for detection capabilities
Qualifications & Skills:
- Intermediate to Advanced technical proficiency
- 3-7 years in cybersecurity operations or detection engineering
- Experience with SIEM platforms and detection automation
