CSOC Engineer - Threat Detection

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue. We're building a more trustworthy Internet. Come join us. CSOC - Engineer - Threat Detection - Pune Fastly is seeking a Threat Detection Engineer to join our Customer Security Operations Centre (CSOC) to bridge the gap between reactive monitoring and proactive defense. In this specialized role, you will move beyond standard incident response to focus on advanced threat hunting, behavioral analysis, and the engineering of sophisticated detection logic. You will serve as a critical resource for our highest-profile enterprise customers, identifying complex vulnerabilities before they are exploited and building the custom mitigations necessary to stop internet-scale, automated attacks. What you’ll do: Proactive Threat Hunting: Execute a “shift-left” security strategy by identifying weaknesses and emerging threat patterns through deep-dive data analysis before they escalate into active incidents. Sophisticated Mitigation Strategy: Using the data from the threat hunting to develop and deploy advanced defensive measures to help customers mitigate complex and advanced threats before they become an issue. Advanced Detection Engineering: Design and implement high-logic countermeasures, including custom VCL (Varnish Configuration Language) for uniqueness tracking, and complex behavioral fingerprinting. Cross-Functional Data Investigation: Work alongside other teams within Fastly to conduct forensic-level analysis on disparate and external datasets to reconstruct sophisticated attack narratives, such as Account Takeover (ATO) attempts involving advanced spoofing and IP rotation. High-Impact Incident SME: Act as the primary technical authority during large-scale security events, providing dedicated, multi-hour analysis and custom rule-building for specific customers during emergencies. What we are looking for : Web Security Expertise: Comprehensive understanding of the OWASP Top 10 and advanced attack vectors (e.g., Credential Stuffing, API Abuse, and Layer 7 DDoS). You can interpret raw payloads to distinguish between malicious intent and legitimate traffic. Protocol Proficiency: Deep technical knowledge of the internet stack, specifically HTTP/S, TCP/IP, DNS, and TLS. You should be comfortable analyzing handshake processes, header structures, and status codes. Analytical Rigor: A methodical approach to digital forensics and incident response. You possess the ability to build and analyse complex data sets and identify disparate data points within JSON or CSV logs to reconstruct an attack narrative. Communication Excellence: The ability to distill complex technical findings into concise, professional, and empathetic communications for both technical and non-technical audiences both internally and customer-facing. We’ll be super impressed if you have experience in any of these: Proficiency in Python or R for log parsing and workflow automation. Experience with Infrastructure as Code/Security as Code(SaC) (Terraform) or other edge-based configurations. Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+. Work Hours: This position will require you to work during scheduled hours from 2pm - 11pm IST Work Location(s) & Travel Requirements: This position is open to the following preferred office location ONLY: Pune, India Fastly currently embraces a largely hybrid model for most roles which allows employees some flexibility to split their time between the office and home. This position may require travel as required by your role or requested by your manager. Salary: Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location. This role may be eligible to participate in Fastly’s equity and discretionary bonus programs. Benefits: We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings? We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change. Why Fastly? We have a huge impact. Fastly is a small company with a big reach. Not only do our customers have a tremendous user base, but we also support a growing number of open source projects and initiatives. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand. We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day. We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about. We’re always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying. All job applications must be submitted through our official careers site at www.fastly.com/about/careers. We will never request sensitive information, such as your Social Security number, bank account or credit card information during the application process. All official communication will come from an @fastly.com or @recruiting.fastly.com email address. Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at candidateaccommodations@fastly.com or 501-287-4901. Fastly collects and processes personal data submitted by job applicants in accordance with our Privacy Policy. Please see our privacy notice for job applicants.