The Security Operations Center (SOC) Information Security Analyst II will be part of the SOC team that monitors, analyzes, and responds to infrastructure threats and vulnerabilities on a 24×7 basis.ResponsibilitiesLead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24×7 SOC environment to detect, verify, and respond swiftly to cyber threats, while minimizing false positives.Perform monitoring, research, assessment, and analysis of security incidents requiring demonstrable incident response experience.Serve as a technical point of escalation and provide mentoring for L1 SOC analysts.Handle security alerts in Splunk SIEM and raise tickets based on alerts.Follow up with respective teams to close alerts and tickets.Analyze and assess security incidents and elevate to appropriate internal teams for additional assistance.Investigate incidents, analyze attack methods, research new defense techniques and tools, develop security policies, and document SOC procedures.Conduct malware and attack analysis to extract indicators of compromise and perform event correlation between various systems.Prepare reports, summaries, and other forms of communication for internal and external stakeholders.Maintain familiarity with industry trends and security best practices.Ensure SLA compliance, process adherence, and continuous improvement to meet operational objectives.Periodically update or create correlation rules based on emerging threats and intelligence sources such as MITRE ATT&CK;, US‐CERT,



and other TTP databases.Basic QualificationsEducation and Experience: 5+ years working in a Security Operations Center environment; Bachelor's degree in engineering or related field preferred.Knowledge and Skills: Excellent knowledge of Intrusion Detection (deep TCP/IP understanding, cybersecurity fundamentals), multiple operating systems (Windows/UNIX), and web technologies (with a focus on Internet security).
Ability to read and interpret packet‐level data.
Familiarity with intrusion detection and prevention, network security products (IDS/IPS, firewalls), and host security tools (HIPS, AV, scanners).
Understanding of emerging threats, web application vulnerabilities, and current cyberattack trends.
Exposure to vulnerability assessment, penetration testing, or forensic analysis is an advantage.
Experience working as part of a distributed, integral team across multiple time zones and cultures.Preferred Certifications and Skills: CEH (Certified Ethical Hacker) preferred.Tools and TechnologiesRequired: Microsoft Office.Strongly Preferred: Cisco network devices, Nexpose or InsightVM, Splunk, CrowdStrike, SCCM, BitLocker, Zscaler, Proofpoint, ServiceNow, Trend Micro, Okta, Azure, and Microsoft 365.Physical Demands and Working ConditionsPrimarily office‐based work; potential internationaltravel up to 5%.
Seniority levelMid‐Senior levelEmployment typeContractJob functionInformation TechnologyIndustries: Manufacturing and Staffing and Recruiting#J-*****-Ljbffr

📌 Security Analyst (Monterrey)
🏢 Gravity It Resources
📍 Monterrey