SOC Detection & Response Engineer — Remote

Unisys; United States; Remote; USD 6,300 - 9,400; Full time

Job summary

Unisys is seeking a SOC Detection and Response Engineer to join its cybersecurity team. This role focuses on monitoring, analyzing, and responding to security incidents across endpoints, networks, and cloud environments from a remote India location.

You will work with SIEMs such as Splunk, EDR tools, and MSSP workflows, performing investigations, containment, and coordination with senior analysts to improve detection and response capabilities.

Qualifications

• 2-3 years of experience in a Security Operations Center (SOC), MSSP, Incident Response, or similar cybersecurity environment.
• Working knowledge of SIEM platforms and security monitoring concepts.
• Experience investigating alerts from EDR platforms.
• Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
• Understanding of network security fundamentals and traffic analysis.
• Familiarity with MITRE ATT&CK framework.
• Foundational understanding of cloud security concepts.

Responsibilities

• Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.
• Perform initial investigation and enrichment to determine alert validity, scope, and potential business impact.
• Analyze endpoint, network, identity, and cloud telemetry to identify indicators of compromise.
• Escalate complex or high-severity incidents to senior analysts and incident responders.
• Assist with containment and response activities under the direction of senior staff.
• Manage investigations through completion with evidence collection, analysis, and escalation as required.
• Participate in structured threat hunting activities and use MITRE ATT&CK to understand adversary tactics.
• Review and validate emerging threats, indicators of compromise, and detection opportunities.
• Collaborate with MSSP analysts and internal teams to review alerts and case outcomes.
• Support operational activities related to security monitoring and investigations.

Skills

SOC / MSSP Experience

Incident response

Threat detection

Security monitoring

Education

Any degree

Tools

Google SecOps

CrowdStrike Falcon

Microsoft Defender

Splunk

SOAR

Job description

Unisys is seeking a SOC Detection and Response Engineer to join its cybersecurity team. This role focuses on monitoring, analyzing, and responding to security incidents across endpoints, networks, and cloud environments from a remote India location.

You will work with SIEMs such as Splunk, EDR tools, and MSSP workflows, performing investigations, containment, and coordination with senior analysts to improve detection and response capabilities.