Cred

Credit card management and rewards platform

Threat Detection Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

The role requires 2 to 6 years of experience in information security, focused on threat detection and response.
Candidates need hands-on experience detecting and responding to threats across cloud, endpoint systems (Windows, Linux, and macOS), and network telemetry.
Candidates need exposure to EDR, IDS/IPS, and SIEM or centralized logging platforms such as Splunk, ELK, or Sentinel, including building high-fidelity detection pipelines.
Candidates need proficiency in at least one programming or scripting language: Python, Go, or Bash.
Candidates need a solid understanding of MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model.
Candidates need the ability to design and tune detection rules using MITRE ATT&CK and threat intelligence, with a focus on signal quality.
Candidates need experience with threat hunting, automation and enrichment, regex creation, and false-positive reduction.
Candidates need experience handling the complete incident response lifecycle, from detection through remediation and reporting.
Candidates need the ability to influence technical and non-technical stakeholders and communicate with engineering, product, and business teams.
Candidates need a proactive approach to staying current with security news, breach reports, tools, and attacker research.
Candidates should demonstrate learning agility and interest in diverse security domains through GitHub, blogs, research, or talks.

Responsibilities

Work across information security, focusing on threat detection, response, and security telemetry across infrastructure, cloud, and data.
Identify and investigate internal and external security threats, partner with stakeholders on remediation, and design preventive controls for recurring or systemic issues.
Design, build, and continuously improve high-fidelity detection use cases across cloud, endpoint, identity, and network telemetry.
Develop detection ideas based on adversary research, emerging attack techniques, industry incidents, and threat intelligence.
Lead and participate in incident response, perform root-cause analysis, and drive preventive improvements after incidents.
Develop and enhance detection, monitoring, and response capabilities.
Automate incident response workflows using playbooks and orchestration to reduce manual effort.
Build in-house security analytics solutions using open-source tools for log parsing, event correlation, and threat detection.
Conduct threat-hunting operations using known adversary tactics, techniques, and procedures to detect advanced threats.
Assist with security awareness and maintain a prudent security engineering culture within the organization.
Enable compliance in teams and help them achieve industry best practices, including PCI DSS and ISO 27001.

Desired Qualifications

Exposure to the AI-driven threat landscape, digital forensics, or malware analysis is a strong plus.

what is CRED?

CRED is an exclusive community for India’s most trustworthy and CREDitworthy individuals, where the members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long lost virtue, one of trust, the idea being to create a community centered around this virtue. a community that constantly strives to become more virtuous in this regard till they finally scale their behavior to create a utopia where being trustworthy is the norm and not the exception. to build a community like this requires a community of its own; a community special in its own way, working towards making this vision come true

here’s a thought experiment: what do you get when you put a group of incredibly passionate and driven people and entrust them with the complete freedom to chase down their goals in a completely uninhibited manner? answer: you get something close to what we have at CRED; CRED just has it better

what you will do ?

work across a diverse information security domain, with a strong focus on threat detection, response, and security telemetry across infrastructure, cloud, and data
identify and investigate security threats (internal and external), partner with stakeholders on remediation, and design preventive controls for recurring or systemic issues
design, build, and continuously improve high-fidelity detection use cases across cloud, endpoint, identity, and network telemetry
formulate new detection ideas based on adversary research, emerging attack techniques, industry incidents, and threat intelligence
lead and participate in incident response, performing root-cause analysis and driving preventive improvements post-incident
develop and enhance the CRED’s detection, monitoring and response capabilities
automate incident response workflows using playbooks and orchestration to reduce manual effort
build in-house security analytics solutions using open source tools (log parsing, event correlation and threat detection)research/conduct threat hunting operations using known adversary tactics, techniques and procedures to detect advanced threats
assist with creating security awareness and maintaining prudent security engineering culture within an organization
enable compliance in teams and help them achieve some of the industry’s best practices (e.g. PCI DSS, ISO 27001)

you should apply if you have:

2 to 6 years of experience in information security with a strong focus on threat detection and response
hands-on experience detecting and responding to threats across cloud (aws preferred), endpoint (windows/linux/macOS), and network telemetry
exposure to EDR, IDS/IPS, and SIEM / centralized logging platforms (splunk, ELK, sentinel, or similar), including building high-fidelity detection pipelines
proficiency in at least one programming or scripting language (python, go, or bash)
solid understanding of MITRE ATT&CK, cyber kill chain, and diamond model
ability to design and tune detection rules using MITRE ATT&CK and threat intelligence with a focus on signal quality
experience with threat hunting, automation and enrichment, regex creation, and false-positive reduction
experience handling the complete incident response lifecycle, from detection through remediation and reporting
strong data-driven mindset with the ability to influence both technical and non-technical stakeholders
ability to act as a go-to person, communicating clearly with engineering, product, and business teams
proactive approach to staying current with security news, breach reports, tools, and attacker research
strong learning agility and passion for exploring diverse security domains, demonstrated via github, blogs, research, or talks
exposure to the AI-driven threat landscape, digital forensics, or malware analysis is a strong plus

how is life at CRED?

working at CRED would instantly make you realize one thing: you are working with the best talent around you. not just in the role you occupy, but everywhere you go. talk to someone around you; most likely you will be talking to a singer, standup comic, artist, writer, an athlete, maybe a magician. at CRED people always have talent up their sleeves. with the right company, even conversations can be rejuvenating. at CRED, we guarantee a good company.

hard truths: pushing oneself comes with the role. and we realize pushing oneself is hard work. which is why CRED is in the continuous process of building an environment that helps the team rejuvenate oneself: included but not limited to a stacked, in-house pantry, with lunch and dinner provided for all the team members, paid sick leaves and a comprehensive health insurance.

to make things smoother and to make sure you spend time and energy only on the most important things, CRED strives to make every process transparent: there are no work timings because we do not believe in archaic methods of calculating productivity, your work should speak for you. there are no job designations because you will be expected to hold down roles that cannot be described in one word.

since trust is a major virtue in the community we have built, we make it a point to highlight it in the community behind CRED: all our employees get their salaries before their joining date. a show of trust that speaks volumes because of the skin in the game.

there are many more such eccentricities that make CRED what it is but that’s for one to discover. if you feel at home reading this, get in touch.

About the Company

Cred

Credit card management and rewards platform

Generating a concise summary of Cred (CRED.club) based on provided description.

Company size: 1,001-5,000
Company stage: Series H
Total funding: $1.8B
Headquarters: Bengaluru, India
Founded: 2018

Recently Posted Jobs

Explore more opportunities at Cred

See more jobs