SOC Detection and Response - Engineer Cyber Security Engineer

• Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.
• Exposure to SOAR platforms and security automation concepts.
• Basic scripting experience using Python, PowerShell, or Bash.
• Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.
• Industry certifications such as Security+, CySA+, SC-200, GSEC, or equivalent.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at . US job seekers can find more information about Unisys’ EEO commitment here.

Originally posted on Himalayas

• 2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.
• Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
• Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
• Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
• Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
• Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.
• Foundational understanding of cloud security concepts and identity-based threats.
• Strong analytical skills with the ability to identify anomalies, patterns, and indicators of malicious activity.
• Ability to perform structured investigations and make sound decisions using available evidence.
• Strong attention to detail and commitment to high-quality documentation.
• Strong verbal and written communication skills.
• Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.
• Ability to follow established processes while adapting to changing operational priorities.