Role: Cybersecurity Threat Detection & Response Engineer

Duration: Long-Term Contract

Job Summary: We are seeking a skilled Cybersecurity Threat Detection & Response professional with strong experience in SIEM, Managed Incident Detection & Response (MIDR/MDR), Threat Modeling, Threat Analysis, and Incident Response. The adecuado candidate will be responsible for proactively identifying, analyzing, and responding to cybersecurity threats, while continuously improving the organization's detection and response capabilities. The role requires a strong understanding of the evolving threat landscape, security monitoring technologies, attack techniques, and enterprise security architecture.

Key Responsibilities:

Security Monitoring & Detection Monitor and analyze security events and alerts generated through SIEM and other security monitoring platforms. Investigate suspicious activities and identify potential security incidents. Develop, tune, and optimize detection rules, correlation logic, use cases, and alerting mechanisms. Reduce false positives and improve the overall effectiveness of security monitoring capabilities. Perform log analysis across infrastructure, applications, cloud platforms, identity systems, and security tools.

Managed Incident Detection & Response (MIDR/MDR) Perform initial triage, investigation, containment, and escalation of security incidents. Analyze indicators of compromise (IOCs), attack patterns, and anomalous behavior. Coordinate with internal security, infrastructure, application, and business teams during incident response activities. Support incident containment, eradication, recovery, and post-incident analysis. Document incidents, investigation findings, root causes,



and recommended remediation actions. Conduct proactive threat analysis using internal telemetry and external threat intelligence. Analyze attacker tactics, techniques, and procedures (TTPs). Map threats and detection capabilities against frameworks such as MITRE ATT&CK; . Identify emerging threats and assess their potential impact on the organization's environment. Develop actionable threat intelligence and recommendations for improving security controls.

Threat Modeling Conduct threat modeling exercises for applications, infrastructure, cloud environments, and enterprise solutions. Identify potential attack vectors, vulnerabilities, threat actors, and security risks. Work with application, architecture, cloud, and engineering teams to embed security considerations into solution design. Recommend appropriate security controls and mitigation strategies. Support secure architecture and secure-by-design initiatives.

Security Engineering & Continuous Improvement Develop and enhance detection use cases based on emerging threats and organizational risks. Automate repetitive security operations and investigation activities where possible. Participate in threat hunting and proactive identification of previously undetected threats. Contribute to improving security processes, playbooks, and incident response procedures.



Support security assessments and provide recommendations for strengthening detection and response capabilities.

Required Skills & Experience: Strong experience in SIEM/Security Event Monitoring and security event analysis. Experience with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, Arc Sight, Elastic, or similar technologies. Experience in Managed Detection & Response (MDR/MIDR), SOC operations, or Incident Response. Strong knowledge of Threat Analysis and Threat Intelligence. Hands-on experience in Threat Modeling methodologies. Experience investigating security incidents across endpoint, network, identity, cloud, and application environments. Knowledge of security logs, network protocols, authentication mechanisms, and common attack patterns. Understanding of malware, phishing, ransomware, privilege escalation, lateral movement, and data exfiltration techniques.

Qualifications: Bachelor's degree in computer science, Information Security, Cybersecurity, or a related discipline. 3–8+ years of relevant cybersecurity experience, depending on the seniority of the role. Relevant certifications are desirable, such as CISSP, CISM , GCIH, GCIA, Security+, CEH, Splunk or Cloud Security certifications Strong analytical and investigative mindset. Ability to correlate information from multiple security tools and data sources. Strong understanding of cyberattack techniques and threat actor behavior. Ability to work effectively during security incidents and high-pressures situations. Strong communication and documentation skills. Ability to collaborate with security, infrastructure, cloud, application, and business teams #J-18808-Ljbffr

📌 Cybersecurity threat detection & response engineer (Jalisco)
🏢 THOUGHT BYTE
📍 Jalisco