Ingeniero De Seguridad De La Información Con Enfoque En Siem

Placements24; Tuxtla Gutiérrez; Hybrid; MXN 420,000 - 780,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Professional development opportunities

Fully remote role

Job summary

Placements24 seeks an Information Security Engineer specializing in SIEM to join our team remotely from anywhere in Mexico. You will develop correlation rules, dashboards, and reports, and ensure secure ingestion of logs from diverse sources.

You will analyze alerts, support incident response, and stay current with threats and SIEM best practices while collaborating with IT and security teams to define log source requirements.

Qualifications

• Bachelor's degree in CS/IT/cybersecurity or related field.
• Minimum 4 years in information security with a focus on SIEM administration and analysis.
• Experience with one or more major SIEM platforms (Splunk, QRadar, ArcSight).
• Solid understanding of threat detection, incident response, and log analysis.
• Scripting skills (Python, PowerShell) for automation preferred.
• Familiar with Windows, Linux, and network protocols.
• Excellent written and verbal communication in Spanish.
• Ability to work independently in a remote environment.
• SIEM or cybersecurity certifications are highly preferred.

Responsibilities

• Administer, configure, and optimize the SIEM platform.
• Develop and maintain SIEM correlation rules, alerts, and dashboards.
• Ensure timely ingestion of logs from diverse devices and systems.
• Analyze SIEM alerts to identify potential incidents and threats.
• Support incident response with SIEM data and analysis.
• Develop and generate regular security reports from SIEM data.
• Tune SIEM rules to reduce false positives and improve detection.
• Stay up-to-date with threats and SIEM best practices.
• Collaborate with IT and security teams to define log source requirements.

Skills

Python

PowerShell

SIEM administration

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Splunk

QRadar

ArcSight

Job description

About the Role

Our client is seeking a dedicated Information Security Engineer with a focus on Security Information and Event Management (SIEM) to join their team. This position, based remotely, will be instrumental in managing, optimizing, and leveraging our client's SIEM platform to detect, analyze, and respond to security threats. You will be responsible for developing correlation rules, dashboards, and reports, as well as ensuring the effective collection and analysis of security logs from diverse sources. The ideal candidate has a strong technical background in SIEM technologies and a deep understanding of cybersecurity principles. This is an excellent opportunity to contribute to a robust security monitoring program from anywhere in Mexico, enhancing our client's ability to defend against cyberattacks.

Key Responsibilities

• Administer, configure, and optimize the SIEM platform (e.g., Splunk, QRadar, ArcSight).
• Develop and maintain SIEM correlation rules, alerts, and dashboards.
• Ensure timely and accurate ingestion of log data from various security devices and systems.
• Analyze SIEM alerts to identify potential security incidents and threats.
• Support incident response activities by providing SIEM data and analysis.
• Develop and generate regular security reports based on SIEM data.
• Perform tuning of SIEM rules to reduce false positives and improve detection efficacy.
• Stay up-to-date with the latest threats, vulnerabilities, and SIEM best practices.
• Collaborate with IT and security teams to define log source requirements and ensure data availability.
• Document SIEM configurations, rules, and operational procedures.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 4 years of experience in information security, with a strong focus on SIEM administration and analysis.
• Proven experience with one or more major SIEM platforms.
• Solid understanding of security concepts, including threat detection, incident response, and log analysis.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Familiarity with various operating systems (Windows, Linux) and network protocols.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills in Spanish.
• Ability to work independently in a remote environment.
• Relevant SIEM certifications or cybersecurity certifications are highly preferred.

Benefits

Our client offers a competitive salary, comprehensive health and wellness benefits, and opportunities for professional development and advanced training in SIEM technologies. The fully remote nature of this role provides significant flexibility. You will work with a collaborative team dedicated to enhancing security monitoring and contributing to the overall cybersecurity posture of the organization. Join our client and leverage your SIEM expertise to make a real impact from your remote work location.