A leading company in the automotive industry is seekingCybersecurity Analysts I & II for the implementation and launch of its SOC (Security Operations Center)Position SummarStrong background in Security Operations Centers (SOC), Incident Response.Responsible for investigating and responding to security incidents, managing SOAR-driven workflows and alerts, improving security operations processes, and collaborating with multiple teams to strengthen the organization's security posture.EducationBachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field(or equivalent professional experience)Certifications/ Preferred skils Desired: CEHRequired Qualification3-5 years of experience in a Security Operations Center (SOC) or Cybersecurity Operations role,even as Tier 2, Tier 3, or LeadExcellent written and verbal communication skills in English are mandatoryDemonstrated experience handling security incidents throughout the complete incident response lifecycleStrong understanding of security monitoring, alert triage, and incident investigationExcellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)Experience working with Security Orchestration, Automation, and Response (SOAR) platformsHands-on experience security alerts on Splunk SIEM and Raise tickets based on the alerts.Experience with Endpoint Detection and Response (EDR) solutionsExperience securing cloud environments, preferably Google Cloud Platform (GCP)Strong understanding of network security fundamentals, operating systems, authentication,



and common attack techniquesExperience analyzing logs from multiple security technologies and event correlationsAbility to identify operational gaps and recommend process improvementsExcellent analytical, troubleshooting, and communication skillsAbility to work independently while collaborating effectively with team members around the worldPeriodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.Experience with one or more of the following technologies is highly desirableGoogle SIEM or similar, Splunk, CrowdStrike Falcon, Cisco Network devices, Nexpose or Insight VM, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.Email security platforms Identity and Access Management (IAM)Vulnerability Management solutionKey ResponsibilitiesMonitor, investigate, triage, and respond to cybersecurity incidents across enterprise environmentsAnalyze alerts from multiple security platforms and determine appropriate response actionsManage and investigate security casesPerform incident analysis, containment, eradication, recovery, and post-incident documentationDevelop and propose improvements to existing detection and response processesCollaborate with engineering teams to enhance security monitoring, detections, and playbooksCreate and maintain incident response procedures, runbooks, and operational documentationWork closely with infrastructure, cloud, networking, and application teams during security investigationsSupport the tuning and optimization of security tools to reduce false positives and improve detection accuracyStay current on emerging threats, attack techniques, and cybersecurity best practicesFlexible schedule required, including weekends and rotating shiftsWe offer:Competitive salary based on experience + Above-law benefits package
#J-*****-Ljbffr

📌 Analista De Ciberseguridad Soc (Nuevo León)
🏢 Importante empresa
📍 Nuevo León