SOC Detection and Response - Engineer Cyber Security Engineer

What success looks like in this role: Job Title: SOC Detection and Response - Engineer Cyber Security Engineer Location: Home Based India Who we are: Unisys is a global information technology company that builds high-performance, security-centric solutions for the most digitally demanding businesses and governments on Earth. Unisys’ offerings include security software and services; digital transformation and workplace services; industry applications and services; and innovative software operating environments for high-intensity enterprise computing. Unisys builds better outcomes securely for its clients across the Government, Financial Services and Commercial markets. For more information, visit www.unisys.com. Our Vision: Enhancing people’s lives through secure, reliable advanced technology. Our Core Beliefs: Curiosity: We embrace the unknown and continuous learning. Creativity: We look past routine ways of doing things. Client-Centricity: Our clients’ success is our success. Integrity: We act ethically and honestly. Position Overview: Identifies potential network, system and information vulnerabilities. Develops and implements solutions to mitigate risks and enhance system security. Provides consultation to organizations on security issues. Performs security investigation and computer forensic analysis. Performs penetration testing, security-focused system architecture review, incident response planning and execution. Identifies potential vulnerabilities and gaps in the Software Development Life Cycle working with the Engineering and Product teams as they build products and solutions. Key Responsibilities/Outcomes Security Monitoring and Incident Investigation Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms. Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact. Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity. Escalate complex, high-severity, or confirmed security incidents to senior analysts and incident responders in accordance with established procedures. Assist with containment and response activities under the direction of senior analysts and incident response personnel. Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required. Threat Detection and Analysis Participate in structured threat hunting activities led by senior analysts to identify potential threats and develop investigative skills. Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures. Assist with the review and validation of emerging threats, indicators of compromise, and detection opportunities.