We're looking for a Tier 1 SOC Analyst to join our team and handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments.This is a client-facing role requiring strong English, excellent verbal communication skills, and the ability to clearly communicate findings and escalations.
The position is intended for candidates with at least 1 year of hands-on SOC / Security Operations experience.The role is based on morning shifts aligned with US working hours, 08:*****:00 US time.Key Responsibilities:Monitor security alerts from SIEM, EDR, and cloud platformsPerform initial triage and classification of alerts as true or false positivesInvestigate suspicious activities across endpoints, identities, and cloud environmentsEscalate confirmed incidents to Tier 2 / Incident Response teams with proper contextAnalyze logs from multiple sources, including CloudTrail, Azure Activity Logs, OS logs, and other relevant security data sourcesDocument findings clearly in tickets and investigation reportsFollow existing playbooks and contribute to improving detection logic over timeCommunicate clearly with internal teams and clients regarding alerts, findings,



and escalations Required Qualifications:1+ years of experience in SOC / Security OperationsHands-on experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for EndpointFamiliarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similarUnderstanding of networking basics, including IP, DNS, HTTP/S, ports, and related conceptsBasic knowledge of Linux and Windows operating systemsAbility to analyze logs and identify suspicious behaviorFluent English, both written and spoken — mandatoryExcellent verbal communication skills, especially in client-facing situationsPreferred Qualifications:Experience with cloud environments such as AWS, Azure, or GCPKnowledge of GCP / Google Cloud Platform — significant advantageAbility to investigate cloud activity, including IAM, API calls, and resource changesUnderstanding of identity-based attacks, such as token abuse and privilege escalationExperience with scripting in Python or BasNice to Have:Experience with threat huntingKnowledge of MITRE ATT&CK;

📌 Soc Analyst (Ciudad Lerdo)
🏢 CommIT
📍 Ciudad Lerdo