Lead Engineer - SIEM & Detection Platforms

Job Title: Lead Engineer - SIEM & Detection Platforms GCL:E Introduction to role: Are you ready to build and lead enterprise-grade detections that stop real attacks before they impact patients and critical operations? As Lead Engineer for SIEM and Detection Platforms in Chennai, you will develop methods to identify, investigate, and neutralize threats. These threats span cloud services, local infrastructure, and OT/ICS environments. Your work will enable our teams to move faster and more safely as we deliver life-changing medicines. You will be the technical driver behind our detection strategy and content, elevating our platforms and practices while partnering with incident responders, threat intelligence, and engineering teams worldwide. Can you envision setting the standard for detection-as-code, scaling coverage across diverse technologies, and turning threat intelligence into high-fidelity signals that matter? Accountabilities: Detection Strategy and Leadership: Lead end-to-end detection engineering initiatives spanning threat coverage, crafting detection algorithms, and efficacy validation across SIEM, EDR, NDR, and cloud-native services; ensure focus on the most significant threats and measurable outcomes. Apply detailed approaches to detection engineering to improve defensive posture, reduce false positives, and accelerate threat identification. Adapt proven strategies to our enterprise context. Enterprise Detection Content Ownership: Build, optimise, and govern the organization's detection content library, mapping coverage to adversary tactics, techniques, and procedures using frameworks such as MITRE ATT&CK. Platform Excellence and Tuning: Drive performance optimisation related to detection mechanisms and platform queries; balance sensitivity with operational efficiency to increase signal quality and reduce alert fatigue. Provide technical oversight to external suppliers and platform vendors. Coordinate with SOC, incident response, and cyber threat analysis teams to validate efficiency and close coverage gaps. Proactive Coverage Management: Continuously assess the evolving threat landscape, identify detection gaps, and drive systematic development of new detections to address emerging techniques across technology domains. Innovation and Automation: Introduce and scale new detection techniques including behavioural analytics and machine learning approaches; champion detection-as-code, scripting, and orchestration to automate quality and deployment. Standards and Quality Frameworks: Define detection engineering standards, development methodologies, and quality controls; ensure repeatability, portability, and maintainability of detection logic. Purple Teaming and Validation: Partner with offensive security to emulate adversaries and validate detections; convert lessons learned into stronger coverage and faster time-to-detect. Continuous Improvement and Metrics: Establish measurable benchmarks for coverage, fidelity, and time-to-detect; lead tuning and improvement cycles that demonstrably reduce false positives and improve precision. Essential Skills/Experience: • Education: Bachelor's degree in information security, computer science, or a related field, or equivalent experience. • Technical expertise: At least five years of experience in detection engineering. Preferably, this is within security operations centres or detection engineering teams. Proven success leading detection initiatives and applying innovative ways at enterprise scale. • Detection engineering fundamentals: Deep expertise in detection logic design, threat modelling, and coverage mapping; extensive experience developing detections across diverse platforms and environments for enterprise-scale operations. • Threat detection frameworks: Comprehensive fam