A leading company in the automotive industry is seeking

Cybersecurity Analysts I & II for the implementation and launch of its SOC (Security Operations Center)

Position Summar

Strong background in Security Operations Centers (SOC), Incident Response.Responsible for investigating and responding to security incidents, managing SOAR-driven workflows and alerts, improving security operations processes, and collaborating with multiple teams to strengthen the organization's security posture.

Education

- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field

(or equivalent professional experience)

- Certifications/ Preferred skils Desired: CEH

Required Qualification

- 3-5 years of experience in a Security Operations Center (SOC) or Cybersecurity Operations role,

even as Tier 2, Tier 3, or Lead

- Excellent written and verbal communication skills in English are mandatory
- Demonstrated experience handling security incidents throughout the complete incident response lifecycle
- Strong understanding of security monitoring, alert triage, and incident investigation
- Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)
- Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)
- Experience working with Security Orchestration, Automation, and Response (SOAR) platforms
- Hands-on experience security alerts on Splunk SIEM and Raise tickets based on the alerts.
- Experience with Endpoint Detection and Response (EDR) solutions
- Experience securing cloud environments, preferably Google Cloud Platform (GCP)
- Strong understanding of network security fundamentals, operating systems, authentication,



and common attack techniques
- Experience analyzing logs from multiple security technologies and event correlations
- Ability to identify operational gaps and recommend process improvements
- Excellent analytical, troubleshooting, and communication skills
- Ability to work independently while collaborating effectively with team members around the world
- Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.

Experience with one or more of the following technologies is highly desirable

- Google SIEM or similar, Splunk, CrowdStrike Falcon, Cisco Network devices, Nexpose or Insight VM, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.
- Email security platforms Identity and Access Management (IAM)
- Vulnerability Management solution

Key Responsibilities

- Monitor, investigate, triage, and respond to cybersecurity incidents across enterprise environments
- Analyze alerts from multiple security platforms and determine appropriate response actions
- Manage and investigate security cases
- Perform incident analysis, containment, eradication, recovery, and post-incident documentation
- Develop and propose improvements to existing detection and response processes
- Collaborate with engineering teams to enhance security monitoring, detections, and playbooks
- Create and maintain incident response procedures, runbooks, and operational documentation
- Work closely with infrastructure, cloud, networking, and application teams during security investigations
- Support the tuning and optimization of security tools to reduce false positives and improve detection accuracy
- Stay current on emerging threats, attack techniques, and cybersecurity best practices
- Adaptable schedule required, including weekends and rotating shifts

We offer:

- Competitive salary based on experience + Above-law benefits package

#J-18808-Ljbffr

📌 Analista de ciberseguridad SOC (Ciudad General Escobedo)
🏢 Reconocida empresa
📍 Ciudad General Escobedo