Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. 1. Job Title & Role Overview Senior Detection Engineer — Security Information and Event Management (SIEM) Engineering and Detection Content Engineering. Experience required: 4 to 8 years. Role Overview The Senior Detection Engineer is a senior technical contributor accountable for SIEM delivery and detection content engineering across the enterprise. You will design, build, test, deploy, tune, and continuously improve detections that draw on SIEM, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), cloud, identity, network, endpoint, application, and email telemetry. 3. Responsibilities and Tasks SIEM Engineering and Delivery Drive the design, implementation, maintenance, and optimization of the enterprise SIEM platform. Define and maintain the SIEM delivery roadmap in line with Global Security Organization strategy and business priorities. Onboard security-relevant log sources with appropriate parsing, normalization, enrichment, correlation, retention, and searchability. Monitor and improve platform availability, performance, scalability, capacity. Keep SIEM components on supported versions and ensure relevant patches and updates are applied. Troubleshoot data ingestion, pipeline, parsing, indexing, correlation, and platform performance issues. Maintain engineering standards, techni
Salary not disclosed
Check market pay for comparable SIEM and SecOps Engineer roles before applying.
Role overview
Job description
-
Design, develop, and maintain high-fidelity detection rules, correlation rules, alerts, and security use cases for newly onboarded and existing log sources. Continuously tune detections to reduce false positives, improve detection fidelity, and expand detection coverage across the environment.
-
Develop security monitoring and detection content for AWS services, Kubernetes, microservices, Linux, macOS, databases, web applications, firewalls, and other enterprise technologies by leveraging the MITRE ATT&CK framework, threat intelligence, and adversary TTPs.
-
Onboard new security and application log sources by developing Logstash pipelines, custom parsers, Grok patterns, ingest processors, and enrichment workflows. Analyze raw log formats, normalize events to a common schema, and enrich security telemetry to enable reliable detection and investigation.
-
Design and maintain operational dashboards, executive dashboards, SOC dashboards, and threat hunting visualizations using optimized OpenSearch Query DSL, aggregations, and visualizations to provide actionable security insights and platform observability.
-
Integrate Threat Intelligence Platforms (TIP), IOC feeds, and enrichment services with OpenSearch. Develop IOC correlation rules, automated enrichment workflows, and contextual detections to identify malicious activity across ingested telemetry.
-
Expand the SIEM by implementing advanced capabilities such as UEBA, anomaly detection, OpenSearch Notebooks for investigation playbooks, SOAR workflows for automated response, and AI-driven automation to streamline Level 1 SOC operations.
-
Collaborate with SOC analysts during alert investigations, threat hunting, and incident response by providing L2/L3 detection engineering support, validating detections, identifying detection gaps, and continuously improving existing security content.
-
Follow Detection-as-Code practices by developing, testing, version-controlling, and deploying detection content through Git-based workflows and CI/CD pipelines, ensuring consistent, reliable, and scalable delivery of SIEM content.
-
Hands-on experience with any enterprise SIEM platforms such as Elastic/ELK, OpenSearch, Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Google Chronicle, Wazuh, ELK/EFK or similar solutions.
-
Experience developing, maintaining, and tuning detection rules, correlation rules, alerts, dashboards, visualizations, and security use cases using SIEM query languages and detection frameworks such as OpenSearch/Elasticsearch Query DSL, Sigma, KQL, SPL, EQL, or equivalent.
-
Strong experience onboarding log sources by developing custom parsers, Logstash pipelines, Fluentd/Fluent Bit configurations, Grok patterns, ETL pipelines, field mappings, log normalization, and data enrichment workflows.
-
4–6 years of experience in Detection Engineering, SIEM Engineering, Security Operations, or SOC environments.
-
Good understanding of SIEM architecture, event correlation, log management, detection engineering, the MITRE ATT&CK framework, Cyber Kill Chain, threat hunting methodologies, attacker TTPs, Threat Intelligence integration, and IOC-based detections.
-
Experience developing detections and investigating security events across Linux, macOS, databases, web applications, firewalls, WAFs, enterprise infrastructure, and cloud environments.
-
Familiarity with open-source security technologies such as Wazuh, Suricata, Zeek (Bro), Velociraptor, HELK, EFK, Falco, osquery, or similar security monitoring solutions.
-
Strong foundation in computer networking, operating systems, authentication and authorization concepts, web technologies, and common attack techniques.
What they are looking for
Skills & requirements
Qualification
We are looking for a highly motivated SIEM / SOC Engineer with 4-6 years of experience in developing, enhancing, and maintaining enterprise-scale Security Operations and SIEM platforms based on the ELK Stack (Elasticsearch, Logstash, Kibana); 4–6 years of experience in Detection Engineering, SIEM Engineering, Security Operations, or SOC environments; Bachelor of Technology (BE/B.Tech), M.Tech/ME in Computer Science or equivalent
Department · Risk & Compliance

Hiring company
Zeta
Build modern banking and payment products and experiences with our one-stack modular, API-ready, cloud-native platform.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
$150K – $200K/yr
🔔 Get job alerts
New SIEM & SecOps Engineer II jobs in Hyderabad, straight to your inbox.
No spam · Unsubscribe anytime