We are seeking a **Security Operations Analyst** to enhance our SOC capabilities and protect our clients from emerging threats.
**Responsibilities**
- Generate reports for various stakeholders
- Respond to security incidents promptly and effectively
- Triages alerts to identify genuine threats
- Develop and refine rule sets and use cases for security monitoring
- Conduct threat hunting activities and support threat intelligence processes
- Improve SOC and SOAR toolsets for enhanced operational efficiency
- Utilize advanced analytic tools to detect emerging threat patterns and vulnerabilities
- Lead SOC tabletop exercises to test readiness
- Participate in on-call rotation every eighth weekend
**Requirements**:
- Experience in Security Operation Center (SOC) with at least 2 years in a similar role
- Knowledge of Splunk, MS Defender, and MS Security tools
- Familiarity with asset discovery tools and VirusTotal
- Good knowledge of malware detection, intrusion detection, and prevention systems
- Experience in security monitoring across Windows, Linux, databases, and network devices
- Strong understanding of host and network security hardening and networking protocols
- Knowledge of common intrusion techniques and risk management concepts
- Detail-oriented with a passion for cyber security
- Solid sense of logic and curiosity to explore security challenges
- Ability to ask insightful questions to improve security posture
- English language proficiency at B2 level or higher
**Nice to have**
- Experience with Tanium or similar asset management, patch management, and EDR solutions
- Familiarity with Qualys vulnerability management
- Knowledge of Azure Sentinel for security analytics
- Experience with AWS security services




- Understanding of ServiceNow SecOps and Sophos platforms
**We offer**
- Career plan and real growth opportunities
- Unlimited access to LinkedIn learning solutions
- Constant training, mentoring, online corporate courses, eLearning and more
- English classes with a certified teacher
- Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)
- Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)
- Flexible work schedule and dress code
- Collaborate in a multicultural environment and share best practices from around the globe
- Hired directly by EPAM & 100% under payroll
- Law benefits (IMSS, INFONAVIT, 25% vacation bonus)
- Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)
- 13 % employee savings fund, capped to the law limit
- Grocery coupons
- 30 days December bonus
- Employee Stock Purchase Plan
- 12 vacations days
- Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)
- Monthly non-taxable amount for the electricity and internet bills
EPAM is a leading integral provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

📌 Security Operations Analyst (Soc) (México)
🏢 Epam Systems
📍 México