Detection Engineer Lead

Job Title- Detection Engineer Lead
Location: Bangalore, India
Employment Type: Permanent

About the Role
The role leads detection engineering principles and processes across the full lifecycle, setting standards, governing workflows, and ensuring detections are threat‑led, operationally effective, and aligned to response capability. The role coaches and mentors the team, provides clear direction into the Detection Factory, and drives continuous improvement through metrics, assurance, and cross‑team alignment. This position owns the Detection Engineering Factory end to end, with accountability for the design, delivery, quality, and operational effectiveness of all detections. This role operates at a strategic level, shaping the long‑term direction, scalability, and value of detection engineering capability while ensuring consistent delivery of high‑quality outcomes

Key Responsibilities:

TEAM MANAGEMENT & GOVERNANCE

• Take full ownership of detection engineering outcomes, including delivery, quality, documentation, and handover.
• Provide assurance over detection engineering outputs, ensuring alignment to cyber defense strategy and risk priorities.
• Establish governance over detection engineering workflows, backlog management, and change control.
• Define and track metrics to measure detection effectiveness, engineering quality, and operational impact.
• Sets clear expectations for performance, quality, and behaviours across the detection engineering team and holds individuals accountable for outcomes.

 

LEADERSHIP QUALITIES

• Provide technical leadership, coaching, and mentoring to uplift detection engineering capability and maturity.
• Apply critical thinking and structured problem‑solving to prioritise work and resolve complex detection challenges.
• Embed a threat‑led mindset in all detection engineering decisions and challenge work that does not align to threat priorities.
• Drive continuous improvement in detection quality, engineering practices, and operational outcomes.
• Articulates the business value of detection engineering outcomes in terms of risk reduction, resilience, and response effectiveness.

 

DETECTION ENGINEERING PROCESSES & SYSTEMS

• Ensure end‑to‑end detection capability is delivered through approved CI/CD workflows and detection engineering pipelines.
• Provide governance and oversight for how detections are integrated, validated, and prioritised in the backlog.
• Contribute to continuous improvement initiatives including documentation refinement, optimizing current workflows, and aligning to new engineering standards.
• Proactively identify detection coverage gaps and implement improvements aligned to threat-led priorities

 

KEY ACCOUNTABILITIES

• Shapes the long‑term evolution of detection engineering capability, ensuring approaches scale across regions, platforms, and future operating models.
• Translates detection coverage, quality, and performance metrics into clear insights for Cyber Defense leadership, enabling informed risk and investment decisions.
• Drive alignment between Detection Engineering and Cyber Defense operations to optimise alert flow and queue health.
• Manages sprints of work, mentor team members, and apply structured problem‑solving to address technical challenges and uplift engineering maturity. 
• Builds strong strategic relationships with Cyber Defense, Digital, and platform teams to ensure detection engineering is integrated into broader security and technology initiatives.

Skills & Experience:

• 8+ years of experience in cybersecurity, with significant experience in detection engineering and team leadership.
• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, and/or equivalent experience.
• Advanced certifications such as GCDA, GSOM — GIAC Security Operations Manager, Microsoft Cybersecurity Architect Expert, LDR551 / LDR553 (SOC leadership & incident management), GICSP
• Familiar with technical threat frameworks such as MITRE ATTACK, Infrastructure as Code, and CI/CD technologies.
• Strong leadership abilities, deep understanding of SIEM/XDR log pipelines and telemetry architecture, detection rule development and tuning, security automation (e.g., SOAR, durable automation patterns) and incident response.

If the opportunity matches your skills and if you are interested, Please share your updated CV on sayali.kothmire@nesfircroft.com

With over 90 years' combined experience, NES Fircroft (NES) is proud to be the world's leading engineering staffing provider spanning the Oil & Gas, Power & Renewables, Chemicals, Construction & Infrastructure, Life Sciences, Mining and Manufacturing sectors worldwide. With more than 80 offices in 45 countries, we are able to provide our clients with the engineering and technical expertise they need, wherever and whenever it is needed. We offer contractors far more than a traditional recruitment service, supporting with everything from securing visas and work permits, to providing market-leading benefits packages and accommodation, ensuring they are safely and compliantly able to support our clients.