Advanced Threat Detection & Response Specialist

Healthcare Businesswomen’s Association; Ciudad de México; Híbrido; MXN 480.000 - 720.000; Jornada completa

Descripción de la vacante

Novartis is seeking a Threat Detection and Response Senior Specialist to join the CSOC in Mexico City. This hybrid role requires 12 days per month in the office and offers exposure to a global cybersecurity operations team protecting networks, endpoints, and cloud services.

You will monitor real-time security controls, help investigate incidents, develop playbooks, and mentor junior staff while coordinating with business stakeholders and IT leadership across the enterprise.

Formación

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field.
• 3+ years in cybersecurity with incident response, threat detection, or security operations.
• Hands-on experience in investigating security incidents in enterprise environments.
• Deep understanding of attacker techniques across endpoints, networks, cloud, and email.
• Experience in CSOC/SOC or IR within a large, complex organization.
• Strong knowledge of security operations workflows, alert triage, and escalation.
• Experience with SIEM, EDR/XDR, email security, identity monitoring, and case management.
• Ability to analyze logs, alerts, and forensic artifacts to determine scope and actions.
• Strong written and verbal communication; brief technical and senior stakeholders.
• Proven ability to identify operational improvements and drive enhancements.

Responsabilidades

• Security Monitoring and Triage of real-time controls across the IT ecosystem.
• Forensics and Incident Response including scoping, reporting, and remediation planning.
• Communicate with technical and non-technical users; prepare reports for stakeholders.
• Gather live evidence from endpoints and log sources.
• Big Data analysis and reporting using SIEM to identify anomalies.
• Design and test playbooks, orchestration workflows, and automations.
• Day-to-day host, network, and malware analysis in security investigations.
• Coordinate containment and response with stakeholders; maintain docs.
• Develop incident findings reports and improvements; tune sensors.
• Mentor junior staff and escalate high-severity incidents.
• Evaluate security solutions for detection/mitigation of TTPs.

Conocimientos

Cyber Threat Hunting

Digital Capabilities

Influencing Skills

Information Security Risk Management

Educación

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field

Herramientas

SIEM

EDR/XDR

Email Security

Identity Monitoring

Case Management

Descripción del empleo

Novartis is seeking a Threat Detection and Response Senior Specialist to join the CSOC in Mexico City. This hybrid role requires 12 days per month in the office and offers exposure to a global cybersecurity operations team protecting networks, endpoints, and cloud services.

You will monitor real-time security controls, help investigate incidents, develop playbooks, and mentor junior staff while coordinating with business stakeholders and IT leadership across the enterprise.