Cyber Defense Operations Lead | Incident Response (24x7)

KTSA - KPMG Technology Services Americas; Región Centro; Hybride; MXN 600 000 - 900 000; Plein temps

Avantages offerts par ce poste

Extended maternity/paternity/adoption

Learning opportunities, training, and证

Wellness and EAP

Comprehensive medical plan

Life insurance

Car insurance

Funeral assistance

Résumé du poste

KTSA – KPMG Technology Services Americas is expanding its cybersecurity operations center across Mexico, delivering high-value security services to KPMG US and clients. The role focuses on incident response, threat hunting, and proactive defense, with a strong emphasis on automation and collaboration with internal tech groups.

The ideal candidate has 3+ years in cybersecurity operations, relevant certifications, scripting/automation experience, and excellent English communication.

Qualifications

• Minimum three years of cybersecurity operations experience.
• Experience implementing monitoring and incident response playbooks.
• Experience with scripting or automation and ServiceNow.
• Excellent verbal/written English communication, collaboration, analytical and presentation skills.

Responsabilités

• Utilize expertise in IT security, security operations, and incident response to maintain 24x7 cybersecurity operations and protect assets.
• Handle incident management, threat hunting, forensic analysis, and remediation efforts.
• Configure and monitor security tools, automate and orchestrate for a unified monitoring/response.
• Apply threat intelligence to assess risk and improve preventive controls.
• Mentor the team and collaborate with internal tech groups for strategic alignment.
• Support small projects, threat assessments, and incident investigations with deadlines.

Connaissances

CrowdStrike

Zscaler

Formation

Bachelor's degree preferred

Certifications such as CISSP, CCSP, GSEC, GCIH, GCFA, CEH, AZ-900 preferred

Outils

Proofpoint

Recorded Future

Cortex XSOAR

Description du poste

KTSA – KPMG Technology Services Americas is expanding its cybersecurity operations center across Mexico, delivering high-value security services to KPMG US and clients. The role focuses on incident response, threat hunting, and proactive defense, with a strong emphasis on automation and collaboration with internal tech groups.

The ideal candidate has 3+ years in cybersecurity operations, relevant certifications, scripting/automation experience, and excellent English communication.