Chennai · On-site
Detection Engineer/Endpoint Security Engineer
- Salary
- Not disclosed
- Experience
- 2–4 years
- Eligible batches
- 2022 · 2023 · 2024
- Location
- ChennaiOn-site
About the role
Mitsogo is looking for a Detection Engineer to join the Hexnode XDR team in Chennai. You will design, author, and fine‑tune detection rules that translate MITRE ATT&CK techniques into actionable alerts on Windows and macOS endpoints, while ensuring low false‑positive rates.
Responsibilities
- Write and maintain detection content mapped to ATT&CK, retiring outdated rules.
- Build safe, benign emulations of adversary techniques for testing.
- Identify telemetry gaps and propose new data points to driver and agent teams.
- Analyze alert noise, create exclusion filters, and improve detection precision.
- Research competitor implementations and keep the ATT&CK coverage matrix up to date.
Eligibility
- 2–4 years of experience in detection engineering, threat hunting, SOC L2/L3, or endpoint security product development.
- Strong knowledge of Windows internals, Sysmon/EDR telemetry, and macOS Endpoint Security framework.
- Fluency with MITRE ATT&CK and ability to map techniques to detection logic.
Skills
- PowerShell and Python scripting for tooling.
- Static PE analysis, similarity hashing (imphash, ssdeep, TLSH).
- Malware triage, unpacking, and familiarity with AV ecosystems (MVI, ELAM, AMSI, ETW).
- Experience with GitLab and Jira in a product engineering workflow.
Resume keywords
Terms from this listing. Many screening tools match exact words, so mirror the ones you genuinely have.
Asked for
- Windows
- Sysmon
- Mitre att&ck
- PowerShell
- Python
- Static pe analysis
- Similarity hashing
- Malware triage
- macOS
- GitLab
Nice to have
- Jira
- Av-comparatives
- Av-test
- Elam
- Amsi
You'll apply on job-boards.greenhouse.io
Apply link checked by CareersAt.Tech and re-tested nightly. You never pay to apply. Report listing
About Mitsogo
Mitsogo is the parent company of unified-endpoint-management product Hexnode, headquartered in San Francisco with major operations in Kochi, India, that helps organisations secure and manage devices across operating systems.
Founded 2013 · 501-1000 employees · HQ San Francisco, California, United States
More about MitsogoSimilar roles
More software jobsCyber Defense Engineering II - Endpoint ProtectionCME Group · Bengaluru
Cyber Security EngineerGE Vernova · Noida, Bengaluru, Pallavaram- Software Engineer Product SecurityRockwell Automation · Bengaluru, Pune
GRC Security AnalystUnisys · Bengaluru- Assoc Eng Cybersecurity EngUnisys · Bengaluru
Test Engineer - Network SecuritySonicWall · Pune