29 ago
|
Ingeniosi
|
México
Job Description
The Senior Associate, Cyber Operations will join the Cyber Operations / Incident Response team and will be responsible for investigating, managing, and documenting cybersecurity incidents within a 24x7 security operations environment.
Key Responsibilities
- Monitor, investigate, and respond to cybersecurity alerts and incidents, identifying potential threats and assessing their impact on the organization. - Manage security incidents throughout the Incident Response lifecycle, including identification, containment, eradication, recovery, and lessons learned. - Investigate security events using Endpoint Detection & Response (EDR) technologies such as CrowdStrike, Microsoft Defender for Endpoint (MDE), Zscaler, or equivalent platforms. - Support threat identification, incident investigation, containment, and remediation activities. - Document incident findings, investigation details, actions taken, and resolution outcomes. - Use ServiceNow or similar platforms for incident ticketing, tracking, and case management.
- Support investigations related to email security threats such as phishing and malicious emails using tools such as Proofpoint or equivalent technologies. - Leverage Threat Intelligence platforms, such as Recorded Future or equivalent solutions, to identify Indicators of Compromise (IOCs) and support incident investigations. - Work within a predominantly Microsoft Azure environment and support security monitoring and incident response activities across cloud-based systems. - Use scripting, preferably Python or Shell Script, to automate small repetitive security tasks when applicable. - Support security automation and orchestration activities using Cortex XSOAR or equivalent SOAR platforms when required. - Stay current with cybersecurity threats, technologies, and security practices and contribute to continuous improvement of incident response processes and controls.
Job Requirements
Must-have
- 3–5 years of hands-on experience in Cybersecurit
📌 Senior Associate, Cyber Operations (México)
🏢 Ingeniosi
📍 México