Threat Detection Engineer
CRED
Threat detection engineer at CRED in Bengaluru: building detections and analytics that catch attackers across cloud, endpoint and application telemetry.
This Bengaluru role asks for 2-6 years in security operations or detection engineering: SIEM platforms (Splunk, ELK, Sentinel or similar), cloud-native logging across AWS (CloudTrail, GuardDuty, VPC Flow Logs), log analysis, EDR tools and scripting (Python). Per the listing, you design, build and continuously improve the detections and analytics that surface real threats from noise.
About CRED
CRED is the Bengaluru-based members-only fintech for India's most creditworthy individuals: credit card bill payments plus rewards, lending, travel and commerce, known for its design-led products and distinctive marketing. Per its listings, it hires across engineering, security, data and product. Learn more on CRED's website.
The role in plain terms
You design and improve CRED's detections: building analytics over cloud, endpoint and application telemetry, tuning signal-to-noise, and working cloud-native logging from CloudTrail and GuardDuty to VPC Flow Logs. The listing names SIEM platforms (Splunk, ELK, Sentinel), EDR tooling, scripting with Python, and threat-hunting fundamentals.
What the employer asks for
These requirements are quoted from the employer's listing, kept in their exact words so eligibility details are not distorted:
Who this role suits
Detection engineers and security analysts with 2-6 years who write detections rather than just triage alerts - SIEM query fluency and Python scripting are core. Strong fit for SOC analysts levelling up into detection engineering. Not for network-security generalists without log-analytics depth.
Practical notes
Be ready to design a detection end to end: data source, logic, false-positive tuning, response. AWS logging (CloudTrail, GuardDuty, VPC Flow Logs) and a SIEM are named - know at least one deeply. CRED is Bengaluru-based; the listing is on-site.
How to apply
Apply directly on the employer's site: Threat Detection Engineer at CRED. We found this listing on the Lever public postings feed (jobs.lever.co), where it was posted on 29 Jan 2026 and was still open when we checked on 31 Oct 2026. Before applying, re-read the employer's own description in full, since eligibility details, deadlines and process steps can change at any time and the employer's page is always the final word. Tailor your resume to the specific requirements above rather than sending a generic one: mirror the skills and tools the listing names where you genuinely have them. A short, specific note on why this team and this problem interest you goes further than a long generic cover letter. Never pay a fee to apply or interview; genuine employers, including this one, do not charge candidates.
Related openings on GetFirstJob
If this role is not the right fit, these current openings are in a similar area:
- Cloud Security Engineer at CRED
- SIEM & SecOps Engineer II at Zeta
- Information Security Engineer at Zscaler
We write and maintain this page from the employer's public listing and link straight to their application page. We do not act as a recruiter, and applying is always free. If the link above stops working, the role has likely been filled.
This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.