Unisys · 17 hours ago
Security Operations Center Analyst
United States
Full-time
Remote
Senior LevelUnisys is seeking a highly skilled Senior SOC Security Engineer to join their dynamic cybersecurity team. This role requires expertise in Application Security and involves leading incident response efforts, mentoring junior analysts, and collaborating with development teams to enhance security measures.
Business DevelopmentInformation ServicesInformation TechnologyManagement Information SystemsSoftware
Hiring Manager
Chetan Singh Awana
Responsibilities
Design and implement security controls for third-party software dependencies and open-source components
Monitor, detect, and respond to security incidents
Develop and execute vulnerability management strategies with emphasis on exploitability and reachability analysis
Conduct deep-dive investigations into Software supply chain Security (SSCS) threats, compromised dependencies, and malicious packages
Perform threat hunting for emerging attack vectors
Assess and mitigate risks associated with software dependencies across enterprise systems and applications
Lead incident response efforts for identity-based attacks and supply chain compromises
Develop detection use cases and threat models specific to SSCS attack vectors
Establish security practices for evaluating and vetting third-party packages and libraries
Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines
Perform vulnerability analysis on 3rd party CVE’s with in the FINRA context and work with engineering teams to fix the vulnerability
Qualification
Required
Strong experience in SOC operations and incident response
Desired Certifications such as CISSP, CASE, OSCP, CSSLP, or GIAC
Proficiency with platforms like Splunk, Sentinel, QRadar, CrowdStrike
Deep understanding of SSCS attack vectors (dependency confusion, compromised packages, malicious commits, backdoors)
Strong knowledge of package managers (npm, PyPI, Maven, NuGet, etc.) and their security implications
Hands-on experience with artifact repository management tools
Experience with SAST, DAST, and SCA tools (e.g., Veracode, Burp Suite, SonarQube)
Deep understanding of OWASP Top 10, SANS 25, and remediation techniques
Familiarity with AWS, Azure, or GCP security configurations and container security
Proficiency with software composition analysis (SCA) tools and vulnerability reachability concepts
Familiarity with cloud platforms (AWS, Azure, GCP) and container security
Experience integrating security into CI/CD pipelines
Familiarity with DevSecOps principles
Strong analytical thinking and attention to detail
Excellent communication skills for cross-functional collaboration
Ability to mentor junior analysts and lead incident response efforts
Preferred
Good understanding of supply chain security
Experience with tools used in supply chain security such as jFrog curation and Socket.Dev
Company
Unisys
Unisys is a worldwide information technology company. They provide a portfolio of IT services, software, and technology that solves
Founded in 1986
10001+ employees
H1B Sponsorship
Unisys has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (43)
2024 (47)
2023 (24)
2022 (21)
2021 (21)
2020 (25)
Funding
Current Stage
Public CompanyTotal Funding
$1.19B2025-06-16Post Ipo Debt· $700M
2020-10-29Post Ipo Debt· $485M
2010-01-19Acquired
Leadership Team
Mike Thomson
CEO & President
Raj R Raman
CTO, Cloud
Recent News
Company data provided by crunchbase