What success looks like in this role:

About the Team

Unisys Detection & Response team under Global Security Operations is responsible threat detection and incident response for Unisys. This organization is peer to Attack Surface Management, Identity & Access Security, and Intel & Offensive Security. This team will have services like 24x7 SOC, Investigation, Incident Response, Threat Hunting, Insider Threat etc. This also includes FSO which manages the clearance processes for federal projects.

What success looks like in this role:

Structure the team with a function/service/capability model. Identify the RACI and key metrics for each service. Increase the talent density within the team through professional development and people management. Operationalize Security Incident Response Plan for the organization and integrate to crisis management plan. Implement Detection Response Platform with clear program health metrics. Increase the Investigation and IR coverage to 24x7 and build a inhouse team. Reestablish advanced hunting within existing IR team. Lead FSO and manage officers assigned. manage certifications and obligation from agencies.

Key Responsibilities:

Strategic Leadership -

Develop and implement a comprehensive detection and incident response strategy aligned with the organization's risk tolerance, regulatory requirements, and industry best practices.
Provide strategic direction and vision for the Detection & Incident Response team, setting clear objectives, priorities, and performance metrics.
Collaborate with senior leadership, IT teams, and other stakeholders to integrate cybersecurity incident response to other business processes.

Threat Detection -

Platform Implementation: Working experience of Google SecOps, Cribl, Splunk etc. Detection Engineering experience with SOC Prime and similar. UEBA for Insider Threat.
Configuration and Optimization: Oversee the configuration and fine-tuning of the selected platforms to achieve optimal performance in threat detection while minimizing false positives, enhancing the overall effectiveness of the cybersecurity infrastructure.
Integration and Automation: Establish seamless integration between the threat detection platform and existing security tools, such as SIEM and EDR solutions, enabling enhanced visibility and automated response capabilities to rapidly mitigate emerging threats and security incidents.

Incident Response Management:

What success looks like in this role:

About the Team

What success looks like in this role:

Key Responsibilities:

Strategic Leadership -

Develop and implement a comprehensive detection and incident response strategy aligned with the organization's risk tolerance, regulatory requirements, and industry best practices.
Provide strategic direction and vision for the Detection & Incident Response team, setting clear objectives, priorities, and performance metrics.
Collaborate with senior leadership, IT teams, and other stakeholders to integrate cybersecurity incident response to other business processes.

Threat Detection -

Platform Implementation: Working experience of Google SecOps, Cribl, Splunk etc. Detection Engineering experience with SOC Prime and similar. UEBA for Insider Threat.
Configuration and Optimization: Oversee the configuration and fine-tuning of the selected platforms to achieve optimal performance in threat detection while minimizing false positives, enhancing the overall effectiveness of the cybersecurity infrastructure.
Integration and Automation: Establish seamless integration between the threat detection platform and existing security tools, such as SIEM and EDR solutions, enabling enhanced visibility and automated response capabilities to rapidly mitigate emerging threats and security incidents.

Incident Response Management:

Director, Head of Detection & Response

Director, Head of Detection & Response

Unisys

Unisys

Benefits

Unisys