Experto en Respuesta a Incidentes de Seguridad

Placements24; Mérida; Hybrid; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work model

Professional certifications support

Health benefits

Job summary

Placements24 in Mérida, Mexico, is seeking an Expert in Security Incident Response to lead investigations, containment, and remediation of cybersecurity incidents. The role emphasizes digital forensics, crisis management, and collaboration with IT, legal, and communications teams.

The ideal candidate has 5+ years of hands-on IR and digital forensics experience, strong knowledge of NIST SP 800-61, and proficiency with EnCase, FTK, Volatility and SIEM tools. A hybrid work model is offered.

Qualifications

• Minimum 5 years of hands-on incident response and digital forensics experience.
• Knowledge of incident response methodologies (e.g., NIST SP 800-61).
• Proficiency with forensic tools and SIEM platforms.
• Experience with Windows and Linux, networks, and malware analysis.
• Strong communication and teamwork skills; on-call rotation.

Responsibilities

• Lead and manage 24/7 incident response when needed.
• Conduct in-depth digital forensics investigations.
• Develop and refine incident response plans and playbooks.
• Coordinate with IT, legal, and communications during incidents.
• Contain, eradicate, and recover from security breaches.
• Preserve evidence per forensic best practices.
• Analyze malware and forensic artifacts.
• Provide post-incident analysis and recommendations.
• Mentor junior security team members.
• Stay updated on threats and IR techniques.

Skills

Incident response

Digital forensics

Crisis management

SIEM proficiency

Network analysis

Malware analysis

Windows and Linux

Communication

On-call rotation

Education

Bachelor's degree in Computer Science/Cybersecurity/Digital Forensics

Certifications such as GCIH, GCFA, EnCE, CISSP (preferred)

Tools

EnCase

FTK

Volatility

SIEM platforms

Job description

About the Role

Our client, a prominent financial institution located in **Mérida, Yucatán**, is seeking a highly skilled Expert in Security Incident Response. This role is critical for leading the investigation, containment, and remediation of cybersecurity incidents to minimize impact and protect the organization's assets. The ideal candidate will have extensive experience in digital forensics, incident handling, and crisis management within a corporate setting. This is a hybrid position, requiring some on-site presence for critical operations and collaboration, while offering flexibility. You will be a key player in safeguarding the institution's sensitive data and maintaining operational resilience.

Key Responsibilities

• Lead and manage the response to cybersecurity incidents 24/7 when necessary.
• Conduct in-depth digital forensics investigations to determine the root cause and scope of incidents.
• Develop, implement, and refine incident response plans, playbooks, and procedures.
• Coordinate with internal teams (IT, legal, communications) and external agencies during incident handling.
• Perform containment, eradication, and recovery activities for security breaches.
• Preserve evidence according to forensic best practices.
• Analyze malware and forensic artifacts.
• Provide post-incident analysis and recommendations to prevent recurrence.
• Stay updated on the latest incident response techniques and emerging threats.
• Mentor junior members of the security team.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or a related field.
• Minimum of 5 years of hands-on experience in security incident response and digital forensics.
• Deep understanding of incident response methodologies (e.g., NIST SP 800-61).
• Proficiency in using forensic tools (e.g., EnCase, FTK, Volatility) and SIEM platforms.
• Experience with network analysis and malware analysis.
• Strong knowledge of operating systems (Windows, Linux) and network protocols.
• Excellent problem-solving, analytical, and critical thinking skills.
• Effective communication and interpersonal skills, with the ability to remain calm under pressure.
• Ability to work flexible hours and participate in an on-call rotation.
• Relevant certifications such as GCIH, GCFA, EnCE, or CISSP are highly preferred.

Benefits

• Competitive salary and performance-based incentives.
• Comprehensive health, dental, and retirement benefits.
• Hybrid work model providing a balance between office and remote work.
• Opportunities for advanced training and professional certifications.
• Be part of a critical security function within a major financial institution.
• Work in a dynamic and collaborative environment in **Mérida**.
• Support for work-life balance.