Solutions Architect Presales (Pune)

We're looking for the technical voice in our customer conversations someone who can walk into a room with detection engineers, threat hunters, SOC leads and CISOs, and turn \"here's our environment, here's what we need to prioritize\" into a working architecture.

This is a hands-on individual contributor role, not a slide-deck presales job. You'll own evaluations end to end, design the analytic strategy for real customer environments, and make their teams genuinely capable at operating an AI-driven SOC.

You'll own:

Technical discovery telemetry mapping, retention, coverage gaps across a customer's estate

Analytic design deciding what runs as real-time detection vs. hypothesis-driven hunt

POVs success criteria, workplace build, scenario runs, results presentation

MITRE ATT&CK; coverage & gap analysis, turned into concrete detection/hunt strategy

SOAR and automation integrations connecting findings to customer response tooling

Workshops, technical deep dives, and the demo environments/reference architectures behind them

What you bring:

7+ years in security operations, detection engineering, threat hunting, IR, or security architecture with customer-facing experience

Hands-on history writing, tuning and measuring detection content in production

Strong MITRE ATT&CK; fluency (ATLAS for AI/agent threats a plus)

Judgment on deterministic detection vs. baseline/rarity/behavioral analytics

Hands-on SOAR experience (XSOAR, Splunk SOAR, Tines, Torq) building, not just operating

Comfort across SIEM (Sentinel, Splunk, Chronicle, Elastic), EDR/XDR, IdP telemetry, CSPM/CNAPP, cloud security (AWS/Azure/GCP)

Query language fluency (KQL/SPL/Lucene/SQL), Sigma or similar, self-sufficient in Python

Bonus: MSSP background, exposure to agentic AI/LLM-driven investigation workflows, detection-as-code, GCIA/GCTI/GCFA/CISSP or cloud security certs.

If you've been the person customers trust to turn \"what should we prioritize\" into an answer let's talk. Write to .