Detection Engineer

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

• Design, develop, and optimize detection use cases using Microsoft KQL to identify and respond to cyber threats proactively.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to create, enhance, and validate detection coverage while identifying security gaps.
• Conduct threat hunting, incident investigations, and deep-dive security analysis across Windows, Linux, Azure, and Microsoft 365 environments.
• Develop SOAR playbooks, automation workflows, dashboards, reports, and visualizations to improve SOC operational efficiency and response capabilities.
• Perform threat emulation and detection validation using tools such as Atomic Red Team and Caldera to continuously assess and strengthen the organization's detection posture.

Your Profile

• 4+ years of experience in detection engineering, developing and tuning detection use cases using Microsoft KQL across enterprise environments.
• Strong knowledge of cybersecurity domains including threat intelligence, incident response, endpoint security, cloud security, identity management, and vulnerability management.
• Hands-on experience investigating security incidents, conducting threat hunting, and mapping detections to the MITRE ATT&CK framework to identify and address security gaps.
• Proficient in Microsoft Sentinel, Azure, Microsoft 365 Security, Defender suite, and security automation using PowerShell and Python.
• Experience creating analysis playbooks, performing malware analysis and threat emulation, and leveraging tools such as Atomic Red Team, Caldera, and AttackIQ to strengthen detection capabilities.

What you will love working in Capgemini

• Design, develop, and optimize detection use cases using Microsoft KQL to proactively identify, detect, and respond to cybersecurity threats.
• Leverage Cyber Threat Intelligence (CTI) and MITRE ATT&CK framework mapping to enhance detection coverage, validate use cases, and identify security gaps.
• Clear career progression paths from engineering roles to architecture and consulting.
• Be part of mission-critical projects that ensure security, compliance, and operational efficiency for Fortune 500 clients.

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com