Detection and Response Specialist - Cybersecurity

Michael Page Colombia; Colombia; A distancia; COP 155.159.000 - 232.739.000; Jornada completa

Descripción de la vacante

Una empresa multinacional busca un Especialista en Monitoreo, Detección y Respuesta bilingüe para unirse a su equipo de ciberseguridad. El candidato ideal tendrá más de 5 años de experiencia en ciberseguridad y será responsable de definir el ciclo de respuesta a incidentes, gestionar herramientas de SIEM y colaborar con equipos internacionales. Esta es una posición completamente remota basada en Colombia.

Servicios

Oportunidad de unirse a una empresa multinacional y trabajar con equipos internacionales

Formación

• Bilingüe (inglés-español), nivel B1/B2.
• 5+ años en ciberseguridad, 3+ en detección y respuesta.
• Certificaciones deseables: GCIH, GCFA, CEH o similares.

Responsabilidades

• Diseñar y gestionar sistemas de monitoreo de seguridad.
• Definir y liderar el ciclo de respuesta a incidentes.
• Optimizar herramientas de SIEM y responder a incidentes.

Conocimientos

Conocimientos sólidos de protocolos de red

Resolución de problemas

Adaptabilidad bajo presión

Educación

Licenciatura en Ciencias de la Computación

Posgrado en ciberseguridad

Herramientas

SIEMs (Splunk, QRadar, etc.)

EDR/XDR

Plataformas en la nube (AWS, Azure, GCP)

Descripción del empleo

Acerca de nuestro cliente

Multinational Company

Descripción

We are looking for a bilingual and experienced Monitoring, Detection, and Response Specialist to join our cybersecurity team. This fully remote role (based in Colombia) requires a strong background in security operations, threat detection, and incident response. The ideal candidate will lead the development and automation of processes to respond to security incidents, ensuring the protection of the organization's systems, networks, and data from cyber threats.

Cyber Monitoring & Detection

• Design and manage security monitoring systems to identify threats.
• Optimize SIEM tools (e.g., configuring alerts, dashboards, and reports).
• Continuously monitor logs and use threat intelligence to detect anomalies.
• Fine-tune detection rules to reduce false positives.
• Design log ingestion processes based on business needs.

Incident Response

• Define and lead the full incident response lifecycle (preparation to post-incident).
• Coordinate with internal/external teams (IT, legal, communications).
• Develop and test incident response playbooks.
• Conduct post-incident reviews and simulations (e.g., tabletop exercises).
• Monitor incident response tools and integrate advanced logs.
• Align detection rules with MITRE ATT&CK and other frameworks.
• Define and automate incident response actions.
• Establish maturity models and metrics for monitoring.
• Escalate high-severity incidents (L3/L4).
• Implement ticketing systems and evaluate tools for incident response.

Collaboration & Reporting

• Identify and implement automation opportunities.
• Continuously improve incident response processes.
• Work with cross-functional teams to align security practices.
• Evaluate third-party tools and vendors.
• Provide guidance on threat detection and response.
• Report on incident metrics, KPIs, and trends.
• Mentor junior analysts and support investigations.

Perfil buscado (h/m)

• Language: Bilingual (English-Spanish), B1/B2 level.
• Education: Bachelor's in Computer Science; postgraduate in cybersecurity is a plus.
• Certifications: GCIH, GCFA, CEH, or similar are highly desirable.
• Experience: 5+ years in cybersecurity, 3+ in detection and response.
• Tools: Experience with SIEMs (Splunk, QRadar, etc.), EDR/XDR, cloud platforms (AWS, Azure, GCP).
• Skills: Strong knowledge of NIST/SANS frameworks, network protocols, communication, problem-solving, and adaptability under pressure.

Qué Ofrecemos

• Opportunity to join a multinational company and work with international teams