Cybersecurity Analyst — Threat & Vulnerability Management

IQVIA Inc; Ciudad de México; On-site; MXN 480,000 - 720,000; Full time

Job summary

IQVIA Inc. in Mexico City is seeking a Security Operations professional to support vulnerability management, attack surface management, CTEM, and penetration testing oversight.

You will triage findings, coordinate remediation, and produce KPI dashboards while coordinating with asset owners.

Fluency in English and strong IT security fundamentals are required, with 2+ years of experience in a related role.

Qualifications

• Requires Bachelor’s degree in computing or equivalent experience.
• 2 years of IT security experience is required.
• Fluent English communication skills are essential.
• Knowledge of networking, Windows, Linux, and cloud basics.
• Familiarity with CVSS/EPSS and OWASP Top 10 preferred.

Responsibilities

• Operate vulnerability and external attack surface scanning; monitor tool health.
• Triage, validate and prioritize findings using severity and threat intel.
• Identify asset owners and manage remediation tickets per SLAs.
• Support penetration testing: collect scope, schedule tests, track findings.
• Monitor threat intelligence for newly exploited vulnerabilities and assess impact.
• Produce dashboards and KPI reports on exposure and SLA adherence.
• Escalate high-risk exposures to Senior Analyst.

Skills

Fluent English

2+ years IT security

Networking basics

Scripting (Python, PowerShell)

Threat intelligence awareness

Education

Bachelor's Degree in Computer Science or related field

Equivalent work experience may substitute for degree

Tools

Vulnerability management tools

External Attack Surface Management (EASM)

Threat Intelligence Platforms

ITSM ticketing systems

Job description

IQVIA Inc. in Mexico City is seeking a Security Operations professional to support vulnerability management, attack surface management, CTEM, and penetration testing oversight.

You will triage findings, coordinate remediation, and produce KPI dashboards while coordinating with asset owners.

Fluency in English and strong IT security fundamentals are required, with 2+ years of experience in a related role.