Job Title: SOC Detection and Response - Engineer Cyber Security Engineer

Location : Home Based India

Unisys is a global information technology company that builds high-performance, security-centric solutions for the most digitally demanding businesses and governments on Earth. Unisys' offerings include security software and services; digital transformation and workplace services; industry applications and services; and innovative software operating environments for high-intensity enterprise computing. Unisys builds better outcomes securely for its clients across the Government, Financial Services and Commercial markets. Enhancing people's lives through secure, reliable advanced technology.

Identifies potential network, system and information vulnerabilities. Develops and implements solutions to mitigate risks and enhance system security. Provides consultation to organizations on security issues. Performs security investigation and computer forensic analysis. Performs penetration testing, security-focused system architecture review, incident response planning and execution. Identifies potential vulnerabilities and gaps in the Software Development Life Cycle working with the Engineering and Product teams as they build products and solutions.

Key Responsibilities/Outcomes Security Monitoring and Incident Investigation

Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.

Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity.

Manage assigned investigations through completion, including evidence collection, analysis, documentation,



and timely escalation when required.

Threat Detection and Analysis

Identify recurring alert patterns and recommend opportunities to improve detection quality and reduce false positives.

Security Operations and MSSP Collaboration

Review MSSP-generated alerts and reports, escalating discrepancies or quality concerns through established processes.

Support operational activities related to security monitoring, alert management, and investigation workflows.

Support the maintenance and testing of security automation workflows and SOAR playbooks.

Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry trends.

Participate in team knowledge sharing, training, and continuous improvement initiatives.

Any degree with 2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity setting.

2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.

- Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
- Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
- Foundational understanding of Windows, Linux,



identity services, and enterprise security concepts.
- Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
- Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.;
- Foundational understanding of cloud security concepts and identity-based threats.

Strong attention to detail and commitment to high-quality documentation.

Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.

Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.

Basic scripting experience using Python, PowerShell, or Bash.

Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [HIDDEN TEXT] .

📌 Cyber Security Engineer - Work From Home (Bengaluru)
🏢 Unisys
📍 Bengaluru