Cyber Defense: Incident Response & SIEM Expert

Bain & Company; Ciudad de México; Híbrido; MXN 450.000 - 700.000; Jornada completa

Descripción de la vacante

Bain & Company is seeking a Security Operations Analyst to safeguard digital assets and data. You will monitor threats, respond to incidents, and help improve security controls across the firm in a hybrid, fast-paced environment.

You'll work across Security Monitoring, Incident Detection and Response, Threat Intel, and related disciplines, with opportunities to specialize; strong English and collaboration skills are essential.

Formación

• Bachelor's degree in CS, cybersecurity, IT, or equivalent.
• 3-5+ years in Security Operations, Incident Response, or related field.
• Professional proficiency in English.
• Hands-on with SIEM platforms and EDR solutions as listed.
• Experience with enterprise security tech including firewalls, IDS/IPS, SIEM, EDR, antivirus, CASB, and DLP.
• Familiarity with NIST, ISO 27001, CIS Controls, or CSA.

Responsabilidades

• Monitor security systems, logs, and alerts to identify incidents.
• Administer and optimize SIEM, IDS/IPS, firewalls, EDR, antivirus, and DLP.
• Research threats and incident techniques, incorporating intelligence into work.
• Investigate security events and assess severity and impact.
• Run incident response playbooks and report on metrics and trends.
• Collaborate with cross-functional teams to strengthen security posture.

Conocimientos

Security Operations

Incident Response

English proficiency

Analytical skills

Cross-functional collaboration

Educación

Bachelor's degree in Computer Science/Cybersecurity/IT or equivalent

Herramientas

Splunk

XSIAM/XSOAR

CrowdStrike

Microsoft Defender

Firewalls

IDS/IPS

DLP

CASB

Descripción del empleo

Bain & Company is seeking a Security Operations Analyst to safeguard digital assets and data. You will monitor threats, respond to incidents, and help improve security controls across the firm in a hybrid, fast-paced environment.

You'll work across Security Monitoring, Incident Detection and Response, Threat Intel, and related disciplines, with opportunities to specialize; strong English and collaboration skills are essential.