, IndiaJob Family Group: Information Technology (IT)Worker Type: RegularPosting Start Date: March 18, 2025Business unit: Projects and TechnologyExperience Level: Experienced Professionals:Whatxe2x80x99s the roleStep into an exhilarating role where you'll lead the charge in detecting latest cybersecurity threats and safeguarding Shell using cutting-edge technology!The role is part of the CISO (Cyber Information Security Office) in the Information and Digital Technology organization. The Threat Detection Engineering team supports Shellxe2x80x99s CyberDefence team by developing and implementing cyber threat detection capabilities. These capabilities identify adversary tactics, techniques, and procedures (TTPs), enabling swift action on Events of Interest. Input from various CyberDefence teams, including Threat, Detect, Incident, and the Red Team, informs the detection opportunities. Threat Detection Engineering helps to recognize malicious activities in the early stage of the kill chain, providing an opportunity to intervene before significant harm occurs.What youxe2x80x99ll be doingAs the Threat Detection Engineer, you will develop correlation searches and reporting capabilities that result in actionable events of interest. The detection searches created in Splunk and Sentinel must be both performant and accurate and continuously updated to adapt to the ever-changing threat landscape.AccountabilitiesDeliver the Threat Detection Engineering Use Case backlogUse scripting/programming languages to test Use Cases and manage git reposDevelop and implement Custom of use cases that are not yet covered by existing tools and solutionsTranslate IoC use case requests into optimized technical implementation and translate behavioral analytics use case requests into algorithms to be deployed in CyberDefence technologiesWork with the wider CyberDefence organization in understanding requirements for detection capabilities and detection logic and able to work with the CyberDefence LT to prioritize work effortBe the quality gatekeeper for all new and existing detection use cases, with a focus on minimizing false positives and reworkSupport and develop other CyberDefence extended team members with experience and best practices in a continuous learning environmentSupport activities to embed automated use case testing and validation checksWhat you bringMinimum 8 years IT security experience and solid engineering backgroundExperience with solution building by secure in design principlesProven experience in coding or scripting experience in languagesProven experience in Splunk Search Processing Language (SPL), some experience with Microsoft Sentinel Kusto Query Language (KQL) preferredSC-200 and or Splunk certifications preferredExperience developing Indicators of Compromise (IoC) in Security Information & Event Management (SIEM) platformsExperience using Git repositories and knowledge of CI/CD pipelinesGood technical understanding of common IT services including Azure and AWS cloud, Unix/Linux and Windows servers and client machines, database technologies, firewalls and network devices, popular application suites, etcDevelops and maintains knowledge of cyber security and maintains an awareness of current developmentsHas excellent written and verbal communication skills and provides well-informed advice to own and others outside the core teamNote: As part of your application, please submit a motivation letter along with your resume. The motivation letter should outline your reasons for applying to this position and how your skills and experiences align with the job requirements. This will help us better understand your interest in the role and your suitability for the position.What we offerYou bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. Youxe2x80x99ll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. Youxe2x80x99ll be able to balance your priorities as you become the best version of yourself.
MNCJobsIndia.com will not be responsible for any payment made to a third-party. All Terms of Use are applicable.