Security Content Engineer (Detection Engineering)

Securonix is leading the transformation of cybersecurity by helping organizations stay ahead of modern threats. Security teams are no longer constrained by data or tools. They are constrained by speed, clarity, and confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle.

 
The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. It unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team.

 
Built cloud-native for scale and performance, the platform enables real-time analytics, deep investigation, and automated response without compromise. Analysts gain faster access to relevant signals. Investigations move from days to minutes. Response becomes consistent and measurable. The result is a CyberOps experience that scales as threats evolve.

 
Securonix is recognized as a six-time Leader in the Gartner Magic Quadrant for SIEM and a Customers’ Choice on Gartner Peer Insights. The company has been featured by leading publications including WIRED, Dark Reading, and Fortune for its innovation and leadership in security operations. Organizations rely on the platform for always-available data, rapid search and investigation, continuously updated threat content, and a fully integrated Threat Detection, Investigation, and Response experience.

 
Backed by Vista Equity Partners, one of the world’s leading enterprise software investors, Securonix benefits from deep operational expertise and a long-term commitment to innovation and growth. This partnership strengthens our ability to scale the platform, accelerate product execution, and support customers as their security needs evolve.

 
With more than 1,000 customers worldwide, including a meaningful portion of the Fortune 100, Securonix operates at global scale. Our ecosystem of partners and managed security service providers extends that reach, helping organizations deploy and operate with confidence wherever they do business. What drives us is how we work.

We win as one team. We operate with trust, respect, and shared accountability.

We are customer driven. Innovation is guided by real security challenges and measurable outcomes.

We act with agility. Change is constant, and we stay aligned on purpose while adapting fast.

That focus is how Securonix helps organizations move from reactive security to proactive, autonomous operations.

Job Title: Security Content Engineer

Job Level: Individual Contributor 

Total Experience: 1 to 3 years

Relevant Experience: 1+ years

Primary Skill Sets: Python, Log Analysis, SIEM, JIRA, Ticket Management

Secondary Skill Sets: MITRE Framework, NOC, SOC, Playbooks

Summary:

We are looking at passionate threat detection engineers who like to fight bad-guys by helping organizations detect attackers within the shortest MTD possible. You will be part of the Securonix Detection Engineering team that is responsible for building the security analytics content, anomaly and threat detection models for the Securonix Next Generation SIEM platform and responding and providing awareness of advanced cyber and insider threats to our community. Our team's mission is to continuously develop detection methods to address the constantly-shifting threat landscape and detect the latest real-world cyberattacks.

Responsibilities of the Role:

Learn the platform capabilities and internals to be able to support troubleshoot issues with detection content 

Triage customer tickets and provide technical support for issues in customer environment associated to detection content

Provide on-call support during weekdays and weekends

Proactively monitor reports and dashboards tracking content metrics from the field and flag issues

Help generate or collect sample logs relevant for resolution of detection tickets

Document RCAs for issues resolved

Ensure detection content is sufficiently tested and validated before pushing to production

Submit clear documentation around the detection content developed

Responsible for maintaining policies and threat-models in the Securonix platform

Skills Required:

At-least 1 year of prior experience in building threat detection content for SIEM platforms like ArcSight, QRadar, Splunk, LogRhythm, etc.

Understanding of the different MITRE ATT&CK Matrices

Strong fundamentals in network and operating systems concepts

Experience working with offensive security testing tools

Ability to automate basic tasks using scripting languages like Python

Experience in GIT and SVN based code management

Strong written and verbal communication skills

Additional Skills (Good to Have):

Prior investigations and response / SOC experience

Information security professional certifications (OSCP, CEH, etc.)

Developer or contributor to open-source attack or defense cyber-security tools 

Benefits:

As a full-time employee with Securonix, you will be eligible for the following employee benefits:

Health Insurance with a total sum insured is INR 5,00,000

Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law

Personal Accident with total sum insured is INR 10,00,000

Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered.

Securonix, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, amnesty or status as a covered veteran in accordance with applicable federal, state and local laws. Securonix complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence, compensation and training.

Securonix expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, national origin, age, genetic information, disability or veteran status. Improper interference with the ability of Securonix employees to perform their expected job duties is absolutely not tolerated.