SOC Detection and Response Senior Engineer Cybersecurity Engineer

About the role

Unisys seeks a SOC Detection and Response - Senior Engineer Cybersecurity Engineer to build and operate security-centric solutions for government, financial services, and commercial clients. Day-to-day, you will develop and execute security controls, deploy security products across environments, automate integrations via scripting and APIs, and coordinate incident handling and tool maintenance. The role is based in Bengaluru, KA, India and is home-based.

What you’ll do

• Develops and executes security controls, defenses and counter measures to intercept and prevent attacks or attempts to infiltrate company systems
• Ensures security product deployment is performed in a seamless manner across varied environments and systems
• Implements automation by scripting and APIs to integrate security products and ensure they work in an orchestrated manner
• Coordinates the handling and resolution of security incidents and day-to-day operations and maintenance of security tools

What you’ll bring

• 4-6 years of hands-on experience in a SOC, Digital Forensics, or Incident Response role
• In-depth understanding and practical experience with SIEM systems (e.g., Splunk, Google SecOps) for log analysis, rule creation, and dashboard development
• Strong knowledge of EDR and IDS/IPS
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for automation, data manipulation, and custom tool development
• Solid understanding of network security, protocols, and traffic analysis
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK) to inform detection strategy and rule development
• Exceptional analytical skills to analyze large, complex datasets and identify subtle anomalies, patterns, and indicators of malicious activity
• Strong verbal and written communication skills for reporting findings, documenting procedures, and collaborating with cross-functional teams and external partners

Nice to have

• Experience working with Google SecOps, Cribl, audit logs, and cloud-native detection tools
• Hands-on experience with Kubernetes incident response and forensic analysis
• Familiarity with Detection-as-Code principles, version control (e.g., Git/GitHub), and CI/CD pipelines for detection rule management
• Relevant security certifications (e.g., SANS, Offensive Security, cloud security certifications)

Skills