Red Team Security Engineer

Backblaze

Colombia
Remote
Full-time

Apply

12 hrs ago

View job

Information Security Analyst (Product Assurance)

Lacuna Talent

United States
Remote
Full-time

Apply

12 hrs ago

View job

Senior Cyber Security Specialist

Softtest pays pty ltd

Australia
Remote
Full-time

Apply

13 hrs ago

View job

OT-Security Consultant / Penetration Tester (m/w/d)

Yekta IT GmbH

Germany
Remote
Full-time

Apply

13 hrs ago

View job

Client Assurance- InfoSec GRC - Remote US

SAMC SitusAMC Holdings Corp

United States
Remote
Full-time

Apply

13 hrs ago

View job

Network Security Engineer - Vulnerability & Compliance Focus

Support Tech LLC

United States
Remote
Full-time

Apply

14 hrs ago

View job

Principal AI Research Cybersecurity Scientist (Bay Area)

Alice

United States
Remote
Full-time

Apply

14 hrs ago

View job

Senior Risk Analyst

Apogee Global RMS

United States
Remote
Contract

Apply

16 hrs ago

View job

Security Compliance Engineer

Yuno

Argentina
Remote
Full-time

Apply

16 hrs ago

View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

Dominican Republic
Remote
Full-time

Apply

17 hrs ago

View job

Senior Incident Response Analyst

HealthEdge

United States
Remote
Full-time

Apply

17 hrs ago

View job

SME Security Control Assessor

IMAGINEEER LLC

United States
Remote
Full-time

Apply

17 hrs ago

View job

Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology

United States
Remote
Full-time

Apply

17 hrs ago

View job

Information Security Risk Specialist

Booz Allen Hamilton

United States
Remote
Full-time

Apply

18 hrs ago

View job

Incident Response Analyst

Check Point Software

Australia
Remote
Full-time

Apply

19 hrs ago

View job

Mid-Level Security Automation Engineer

DecisionPoint Corporation

United States
Remote
Full-time

Apply

20 hrs ago

View job

Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust

United States
Remote
Full-time

Apply

20 hrs ago

View job

Cybersecurity Analyst II

Frontgrade Technologies

United States
Remote
Full-time

Apply

20 hrs ago

View job

Security Operations Engineer

Collectors

United States
Remote
Full-time

Apply

21 hrs ago

View job

IT Security Specialist (Microsoft Azure & 365 Focus)

Support Tech LLC

United States
Remote
Contract

Apply

21 hrs ago

View job

Cybersecurity Program Manager

Apogee Global RMS

United States
Remote
Contract

Apply

22 hrs ago

View job

Director, IT & Security

Illuminate Literacy

United States
Remote
Full-time

Apply

22 hrs ago

View job

Senior Security Operations Engineer

Sword Health

United States
Remote
Full-time

Apply

23 hrs ago

View job

Security Software Developer

Softtest pays pty ltd

Australia
Remote
Full-time

Apply

1 day ago

View job

National Security Manager

Fujifilm

United States
Remote

Apply

1 day ago

View job

Manager Identity & Trust Engineering

BlueCross BlueShield of Tennessee

United States
Remote
Full-time

Apply

1 day ago

View job

Senior Product Owner DevSecOps

Humana

United States
Remote
Full-time

Apply

1 day ago

View job

Sr. Engineer, Product Cyber Security

United States
Remote
Full-time

Apply

1 day ago

View job

Sr. Security/ Technology Engineer

NV5

United States
Remote
Full-time

Apply

1 day ago

View job

Cyber Security Cloud Engineer

National Carwash Solutions

United States
Remote
Full-time

Apply

1 day ago

SOC Detection and Response - Engineer Cyber Security Engineer

Unisys

SOC Detection and Response - Engineer Cyber Security Engineer

IndiaRemoteFull-time

Posted Oct 2

Apply

Job Description

What success looks like in this role:

Job Title: SOC Detection and Response - Engineer Cyber Security Engineer

Location:Home Based India

Who we are:

Unisys is a global information technology company that builds high-performance, security-centric solutions for the most digitally demanding businesses and governments on Earth. Unisys’ offerings include security software and services; digital transformation and workplace services; industry applications and services; and innovative software operating environments for high-intensity enterprise computing. Unisys builds better outcomes securely for its clients across the Government, Financial Services and Commercial markets. For more information, visit .

Our Vision: Enhancing people’s lives through secure, reliable advanced technology.

Our Core Beliefs:

Curiosity: We embrace the unknown and continuous learning.
Creativity: We look past routine ways of doing things.
Client-Centricity: Our clients’ success is our success.
Integrity: We act ethically and honestly.

Position Overview:

Identifies potential network, system and information vulnerabilities. Develops and implements solutions to mitigate risks and enhance system security. Provides consultation to organizations on security issues. Performs security investigation and computer forensic analysis. Performs penetration testing, security-focused system architecture review, incident response planning and execution. Identifies potential vulnerabilities and gaps in the Software Development Life Cycle working with the Engineering and Product teams as they build products and solutions.

Key Responsibilities/Outcomes
Security Monitoring and Incident Investigation
Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.
Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact.
Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity.
Escalate complex, high-severity, or confirmed security incidents to senior analysts and incident responders in accordance with established procedures.
Assist with containment and response activities under the direction of senior analysts and incident response personnel.
Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required.

Threat Detection and Analysis

Participate in structured threat hunting activities led by senior analysts to identify potential threats and develop investigative skills.
Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures.
Assist with the review and validation of emerging threats, indicators of compromise, and detection opportunities.
Identify recurring alert patterns and recommend opportunities to improve detection quality and reduce false positives.

Security Operations and MSSP Collaboration

Collaborate with MSSP analysts and internal teams to review alerts, investigations, and case outcomes.
Review MSSP-generated alerts and reports, escalating discrepancies or quality concerns through established processes.
Support operational activities related to security monitoring, alert management, and investigation workflows.

Security Automation and Process Support

Support the maintenance and testing of security automation workflows and SOAR playbooks.
Identify opportunities to improve investigation efficiency, alert handling, and response processes.
Follow established investigation playbooks, escalation procedures, and operational standards.

Documentation and Continuous Improvement

Maintain accurate, complete, and audit-ready documentation of investigations, incident response actions, and case outcomes.
Ensure case updates, evidence, and findings are properly recorded within case management platforms.
Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry trends.
Participate in team knowledge sharing, training, and continuous improvement initiatives.

You will be successful in this role if you have:

Technical Expertise

2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.
Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.
Foundational understanding of cloud security concepts and identity-based threats.

Analytical and Problem-Solving Skills

Strong analytical skills with the ability to identify anomalies, patterns, and indicators of malicious activity.
Ability to perform structured investigations and make sound decisions using available evidence.
Strong attention to detail and commitment to high-quality documentation.

Collaboration and Communication

Strong verbal and written communication skills.
Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.
Ability to follow established processes while adapting to changing operational priorities.

Preferred Qualifications

Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.
Exposure to SOAR platforms and security automation concepts.
Basic scripting experience using Python, PowerShell, or Bash.
Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.
Industry certifications such as Security+, CySA+, SC-200, GSEC, or equivalent.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at . US job seekers can find more information about Unisys’ EEO commitment here.

Originally posted on Himalayas

Job Description

What success looks like in this role:

Job Title: SOC Detection and Response - Engineer Cyber Security Engineer

Location:Home Based India

Who we are:

Our Vision: Enhancing people’s lives through secure, reliable advanced technology.

Our Core Beliefs:

Curiosity: We embrace the unknown and continuous learning.
Creativity: We look past routine ways of doing things.
Client-Centricity: Our clients’ success is our success.
Integrity: We act ethically and honestly.

Position Overview:

Key Responsibilities/Outcomes
Security Monitoring and Incident Investigation
Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.
Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact.
Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity.
Escalate complex, high-severity, or confirmed security incidents to senior analysts and incident responders in accordance with established procedures.
Assist with containment and response activities under the direction of senior analysts and incident response personnel.
Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required.

Threat Detection and Analysis

Participate in structured threat hunting activities led by senior analysts to identify potential threats and develop investigative skills.
Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures.
Assist with the review and validation of emerging threats, indicators of compromise, and detection opportunities.
Identify recurring alert patterns and recommend opportunities to improve detection quality and reduce false positives.

Security Operations and MSSP Collaboration

Collaborate with MSSP analysts and internal teams to review alerts, investigations, and case outcomes.
Review MSSP-generated alerts and reports, escalating discrepancies or quality concerns through established processes.
Support operational activities related to security monitoring, alert management, and investigation workflows.

Security Automation and Process Support

Support the maintenance and testing of security automation workflows and SOAR playbooks.
Identify opportunities to improve investigation efficiency, alert handling, and response processes.
Follow established investigation playbooks, escalation procedures, and operational standards.

Documentation and Continuous Improvement

Maintain accurate, complete, and audit-ready documentation of investigations, incident response actions, and case outcomes.
Ensure case updates, evidence, and findings are properly recorded within case management platforms.
Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry trends.
Participate in team knowledge sharing, training, and continuous improvement initiatives.

You will be successful in this role if you have:

Technical Expertise

2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.
Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.
Foundational understanding of cloud security concepts and identity-based threats.

Analytical and Problem-Solving Skills

Strong analytical skills with the ability to identify anomalies, patterns, and indicators of malicious activity.
Ability to perform structured investigations and make sound decisions using available evidence.
Strong attention to detail and commitment to high-quality documentation.

Collaboration and Communication

Strong verbal and written communication skills.
Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.
Ability to follow established processes while adapting to changing operational priorities.

Preferred Qualifications

Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.
Exposure to SOAR platforms and security automation concepts.
Basic scripting experience using Python, PowerShell, or Bash.
Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.
Industry certifications such as Security+, CySA+, SC-200, GSEC, or equivalent.

Originally posted on Himalayas

Job Description

What success looks like in this role:

Job Title: SOC Detection and Response - Engineer Cyber Security Engineer

Location:Home Based India

Who we are:

Our Vision: Enhancing people’s lives through secure, reliable advanced technology.

Our Core Beliefs:

Curiosity: We embrace the unknown and continuous learning.
Creativity: We look past routine ways of doing things.
Client-Centricity: Our clients’ success is our success.
Integrity: We act ethically and honestly.

Position Overview:

Key Responsibilities/Outcomes
Security Monitoring and Incident Investigation
Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.
Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact.
Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity.
Escalate complex, high-severity, or confirmed security incidents to senior analysts and incident responders in accordance with established procedures.
Assist with containment and response activities under the direction of senior analysts and incident response personnel.
Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required.

Threat Detection and Analysis

Participate in structured threat hunting activities led by senior analysts to identify potential threats and develop investigative skills.
Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures.
Assist with the review and validation of emerging threats, indicators of compromise, and detection opportunities.
Identify recurring alert patterns and recommend opportunities to improve detection quality and reduce false positives.

Security Operations and MSSP Collaboration

Collaborate with MSSP analysts and internal teams to review alerts, investigations, and case outcomes.
Review MSSP-generated alerts and reports, escalating discrepancies or quality concerns through established processes.
Support operational activities related to security monitoring, alert management, and investigation workflows.

Security Automation and Process Support

Support the maintenance and testing of security automation workflows and SOAR playbooks.
Identify opportunities to improve investigation efficiency, alert handling, and response processes.
Follow established investigation playbooks, escalation procedures, and operational standards.

Documentation and Continuous Improvement

Maintain accurate, complete, and audit-ready documentation of investigations, incident response actions, and case outcomes.
Ensure case updates, evidence, and findings are properly recorded within case management platforms.
Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry trends.
Participate in team knowledge sharing, training, and continuous improvement initiatives.

You will be successful in this role if you have:

Technical Expertise

2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.
Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.
Foundational understanding of cloud security concepts and identity-based threats.

Analytical and Problem-Solving Skills

Strong analytical skills with the ability to identify anomalies, patterns, and indicators of malicious activity.
Ability to perform structured investigations and make sound decisions using available evidence.
Strong attention to detail and commitment to high-quality documentation.

Collaboration and Communication

Strong verbal and written communication skills.
Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.
Ability to follow established processes while adapting to changing operational priorities.

Preferred Qualifications

Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.
Exposure to SOAR platforms and security automation concepts.
Basic scripting experience using Python, PowerShell, or Bash.
Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.
Industry certifications such as Security+, CySA+, SC-200, GSEC, or equivalent.

Originally posted on Himalayas

Job Description

What success looks like in this role:

Job Title: SOC Detection and Response - Engineer Cyber Security Engineer

Location:Home Based India

Who we are:

Our Vision: Enhancing people’s lives through secure, reliable advanced technology.

Our Core Beliefs:

Curiosity: We embrace the unknown and continuous learning.
Creativity: We look past routine ways of doing things.
Client-Centricity: Our clients’ success is our success.
Integrity: We act ethically and honestly.

Position Overview:

Key Responsibilities/Outcomes
Security Monitoring and Incident Investigation
Monitor and triage security alerts generated by SIEM, EDR, IDS/IPS, email security, identity protection, cloud security, and other security monitoring platforms.
Perform initial investigation and enrichment activities to determine alert validity, scope, and potential business impact.
Analyze endpoint, network, identity, and cloud security telemetry to identify indicators of compromise and suspicious activity.
Escalate complex, high-severity, or confirmed security incidents to senior analysts and incident responders in accordance with established procedures.
Assist with containment and response activities under the direction of senior analysts and incident response personnel.
Manage assigned investigations through completion, including evidence collection, analysis, documentation, and timely escalation when required.

Threat Detection and Analysis

Participate in structured threat hunting activities led by senior analysts to identify potential threats and develop investigative skills.
Use frameworks such as MITRE ATT&CK to understand adversary tactics, techniques, and procedures.
Assist with the review and validation of emerging threats, indicators of compromise, and detection opportunities.
Identify recurring alert patterns and recommend opportunities to improve detection quality and reduce false positives.

Security Operations and MSSP Collaboration

Collaborate with MSSP analysts and internal teams to review alerts, investigations, and case outcomes.
Review MSSP-generated alerts and reports, escalating discrepancies or quality concerns through established processes.
Support operational activities related to security monitoring, alert management, and investigation workflows.

Security Automation and Process Support

Support the maintenance and testing of security automation workflows and SOAR playbooks.
Identify opportunities to improve investigation efficiency, alert handling, and response processes.
Follow established investigation playbooks, escalation procedures, and operational standards.

Documentation and Continuous Improvement

Maintain accurate, complete, and audit-ready documentation of investigations, incident response actions, and case outcomes.
Ensure case updates, evidence, and findings are properly recorded within case management platforms.
Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry trends.
Participate in team knowledge sharing, training, and continuous improvement initiatives.

You will be successful in this role if you have:

Technical Expertise

2-3 years of experience working in a Security Operations Center (SOC), Managed Security Services Provider (MSSP), Incident Response, or similar cybersecurity environment.
Working knowledge of Security Information and Event Management (SIEM) platforms and security monitoring concepts.
Experience investigating alerts generated from Endpoint Detection and Response (EDR) platforms.
Foundational understanding of Windows, Linux, identity services, and enterprise security concepts.
Understanding of network security fundamentals, common protocols, and traffic analysis concepts.
Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK.
Foundational understanding of cloud security concepts and identity-based threats.

Analytical and Problem-Solving Skills

Strong analytical skills with the ability to identify anomalies, patterns, and indicators of malicious activity.
Ability to perform structured investigations and make sound decisions using available evidence.
Strong attention to detail and commitment to high-quality documentation.

Collaboration and Communication

Strong verbal and written communication skills.
Ability to work effectively within a global cybersecurity team and collaborate with technical and non-technical stakeholders.
Ability to follow established processes while adapting to changing operational priorities.

Preferred Qualifications

Experience with Google SecOps, CrowdStrike Falcon, Microsoft Defender, Splunk, or similar technologies.
Exposure to SOAR platforms and security automation concepts.
Basic scripting experience using Python, PowerShell, or Bash.
Exposure to threat hunting, digital forensics, malware analysis, or incident response activities.
Industry certifications such as Security+, CySA+, SC-200, GSEC, or equivalent.

Originally posted on Himalayas