Cloud Security & Threat Detection Analyst

Thales Group; Ciudad de México; Hybrid; MXN 600,000 - 1,000,000; Full time

Job summary

Thales Group is seeking a Security Analyst to join our 24/7 security operations. You will secure cloud and production environments, develop detections, and respond to incidents with hands-on expertise across SIEM, CSPM, CNAPP, and EDR/XDR tools.

You will lead threat hunting, vulnerability reviews, and security gap analyses while collaborating with global teams to strengthen our security posture and incident response capabilities.

Qualifications

• 5+ years hands-on with major cloud providers (e.g., AWS, Azure, GCP)
• 5+ years with SIEM solutions, log correlation, and dashboards
• 5+ years in security alert monitoring and incident investigation
• 3+ years implementing DevSecOps in CI/CD, IaC, container security
• Strong knowledge of cloud-native security, IAM, logging, workload protection
• Experience scripting (Python/PowerShell/Bash) to automate security workflows
• Familiarity with MITRE ATT&CK and threat hunting techniques

Responsibilities

• Monitor, investigate, and triage security events to support threat modeling
• Proactively monitor cloud, network, and endpoints to identify threats
• Perform cloud security posture assessments and policy enforcement across AWS, Azure, GCP
• Develop security alerts, log correlations, and dashboards in SIEM
• Design and implement security automation and incident response workflows
• Collaborate with cross-functional teams to strengthen security practices
• Conduct quarterly threat hunts and publish threat intelligence
• Review vulnerability scans and document remediation efforts
• Engage vendors for third-party security assessments

Skills

Cloud security

SIEM

Threat detection

Incident response

DevSecOps

Python scripting

XDR/Cortex security

Job description

Thales Group is seeking a Security Analyst to join our 24/7 security operations. You will secure cloud and production environments, develop detections, and respond to incidents with hands-on expertise across SIEM, CSPM, CNAPP, and EDR/XDR tools.

You will lead threat hunting, vulnerability reviews, and security gap analyses while collaborating with global teams to strengthen our security posture and incident response capabilities.