Cloud-Native Security Operations Analyst

Thales; México; Presencial; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Thales in Mexico is seeking a Security Analyst to join a 24/7 security operations team. You will detect, investigate, and respond to threats across cloud, network, and endpoints, while enabling secure deployment and automation within modern CI/CD pipelines and IaC practices.

The role requires hands-on experience with cloud providers (AWS/Azure/GCP), SIEM, and endpoint security, plus collaboration with global teams to uphold security standards and threat intelligence sharing.

Formación

• 5+ years hands-on with major cloud providers (AWS, Azure, GCP)
• 5+ years hands-on with endpoint security and detection technologies (Cortex XDR, CrowdStrike, Defender)
• 5+ years of experience with SIEM, log correlation, alert development, and dashboards
• 3+ years implementing DevSecOps in CI/CD, IaC, containers, and automated security testing
• Strong understanding of cloud-native security tools, IAM, logging, and workload protection
• Automation scripting with Python/PowerShell/Bash to improve security operations
• Practical threat hunting experience and MITRE ATT&CK familiarity
• Ability to interpret logs, network traffic and system behavior to detect anomalies
• Experience collaborating across global teams in cross-functional environments
• Excellent written and verbal communication with technical and non-technical stakeholders

Responsabilidades

• Monitor, investigate, and triage security events to support threat modeling
• Proactively monitor cloud, network, and endpoints for suspicious activity
• Perform cloud security posture assessments across AWS, Azure, GCP
• Develop and maintain security alerts, log correlations, and dashboards in SIEM
• Create security automation and incident response workflows to improve efficiency
• Configure and optimize SIEM, CSPM, CNAPP, EDR/XDR, DLP and cloud monitoring
• Conduct threat hunts and publish threat intelligence reports
• Manage security ticket queue, investigations, and resolutions
• Review vulnerability scans and remediation efforts
• Document, analyze, and escalate security incidents as needed
• Collaborate with business units to assess secure configurations
• Define and implement security standards with internal stakeholders
• Conduct quarterly security gap analyses and risk assessments
• Perform third-party security assessments for vendors

Conocimientos

Cloud security

Endpoint security

SIEM proficiency

DevSecOps

Threat hunting

Python scripting

Incident response

MITRE ATT&CK knowledge

Cross-functional collaboration

Security operations

Herramientas

Cortex XDR

CrowdStrike

Microsoft Defender

Descripción del empleo

Thales in Mexico is seeking a Security Analyst to join a 24/7 security operations team. You will detect, investigate, and respond to threats across cloud, network, and endpoints, while enabling secure deployment and automation within modern CI/CD pipelines and IaC practices.

The role requires hands-on experience with cloud providers (AWS/Azure/GCP), SIEM, and endpoint security, plus collaboration with global teams to uphold security standards and threat intelligence sharing.