27 ago
|
Ingeniosi
|
México
Job Description
The Senior Associate, Cyber Operations will join the Cyber Operations / Incident Response team and will be responsible for investigating, managing, and documenting cybersecurity incidents within a 24x7 security operations environment.
Key Responsibilities
- Monitor, investigate, and respond to cybersecurity alerts and incidents, identifying potential threats and assessing their impact on the organization.
- Manage security incidents throughout the Incident Response lifecycle, including identification, containment, eradication, recovery, and lessons learned.
- Investigate security events using Endpoint Detection & Response (EDR) technologies such as CrowdStrike, Microsoft Defender for Endpoint (MDE), Zscaler, or equivalent platforms.
- Support threat identification, incident investigation, containment, and remediation activities.
- Document incident findings, investigation details, actions taken, and resolution outcomes.
- Use ServiceNow or similar platforms for incident ticketing, tracking, and case management.
- Support investigations related to email security threats such as phishing and malicious emails using tools such as Proofpoint or equivalent technologies.
- Leverage Threat Intelligence platforms, such as Recorded Future or equivalent solutions, to identify Indicators of Compromise (IOCs) and support incident investigations.
- Work within a predominantly Microsoft Azure environment and support security monitoring and incident response activities across cloud-based systems.
- Use scripting, preferably Python or Shell Script, to automate small repetitive security tasks when applicable.
- Support security automation and orchestration activities using Cortex XSOAR or equivalent SOAR platforms when required.
- Stay current with cybersecurity threats, technologies, and security practices and contribute to continuous improvement of incident response processes and controls.
Job Requirements
Must-have
- 3–5 years of hands-on experience in Cybersec
📌 Senior Associate, Cyber Operations – Incident Response (México)
🏢 Ingeniosi
📍 México