Remote Cloud Security Operations Engineer - Mexico

Gainsight; México; Remote; MXN 900,000 - 1,500,000; Full time

Benefits offered by this job

Corporate performance bonus

Aguinaldo (Christmas bonus)

Remote benefits package (medical, etc)

Local statutory benefits

Job summary

Gainsight is seeking a remote Cloud Security Operations Engineer in Mexico to strengthen cloud detection and response across multi-cloud environments. You’ll lead incident investigations and build tooling to improve team effectiveness.

The role requires 4+ years in security engineering or SOC/IR, strong cloud security knowledge, and hands-on experience with SIEM and cloud logs. Collaboration with engineering and stakeholders is essential; travel up to 10–20% may be required.

Qualifications

• 4+ years in security engineering, SOC ops, or incident response in a complex enterprise
• 3+ years defending production cloud workloads
• Bachelor's degree or equivalent experience
• Strong cloud security architecture knowledge and telemetry
• Deep IAM understanding and incident response experience
• Hands-on with cloud-native logs and forensics
• Experience with cloud-native threat detection services and SIEM
• Proficient in Python/PowerShell/Bash scripting
• Certs: GCIH, GCFE, GCIA, GCDA, OSCP, AWS/GCP security certs

Responsibilities

• Triage and investigate cloud alerts end-to-end across tooling; determine severity and close with findings
• Detect and respond to cloud threats, including identity compromise and misconfigurations
• Build detections on CloudTrail, Cloud Audit Logs, and related logs
• Run proactive threat hunts using ATT&CK-aligned methods
• Automate cloud containment actions and runbooks
• Lead incident response from scoping to post-incident review with cross-functional teams
• Maintain SIEM rules and detection-as-code pipelines
• Ensure health of SecOps tooling estate and on-call participation

Skills

Security engineering

SOC operations

Incident response

Cloud security architecture

IAM and attack paths

Threat detection tooling

SIEM tuning

MITRE ATT&CK

Digital forensics

Python/PowerShell/Bash

Cloud provider logs

Education

Bachelor's degree or equivalent experience

Tools

GuardDuty

Sentinel

Security Command Center

CloudTrail

Entra ID logs

GCP Cloud Audit Logs

XSOAR/SOAR

Sigma detection

Job description

Gainsight is seeking a remote Cloud Security Operations Engineer in Mexico to strengthen cloud detection and response across multi-cloud environments. You’ll lead incident investigations and build tooling to improve team effectiveness.

The role requires 4+ years in security engineering or SOC/IR, strong cloud security knowledge, and hands-on experience with SIEM and cloud logs. Collaboration with engineering and stakeholders is essential; travel up to 10–20% may be required.