Remote SIEM Security Engineer — Threat Detection & Response

Placements24; Tuxtla Gutiérrez; Híbrido; MXN 420.000 - 780.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Health benefits

Professional development opportunities

Fully remote role

Descripción de la vacante

Placements24 seeks an Information Security Engineer specializing in SIEM to join our team remotely from anywhere in Mexico. You will develop correlation rules, dashboards, and reports, and ensure secure ingestion of logs from diverse sources.

You will analyze alerts, support incident response, and stay current with threats and SIEM best practices while collaborating with IT and security teams to define log source requirements.

Formación

• Bachelor's degree in CS/IT/cybersecurity or related field.
• Minimum 4 years in information security with a focus on SIEM administration and analysis.
• Experience with one or more major SIEM platforms (Splunk, QRadar, ArcSight).
• Solid understanding of threat detection, incident response, and log analysis.
• Scripting skills (Python, PowerShell) for automation preferred.
• Familiar with Windows, Linux, and network protocols.
• Excellent written and verbal communication in Spanish.
• Ability to work independently in a remote environment.
• SIEM or cybersecurity certifications are highly preferred.

Responsabilidades

• Administer, configure, and optimize the SIEM platform.
• Develop and maintain SIEM correlation rules, alerts, and dashboards.
• Ensure timely ingestion of logs from diverse devices and systems.
• Analyze SIEM alerts to identify potential incidents and threats.
• Support incident response with SIEM data and analysis.
• Develop and generate regular security reports from SIEM data.
• Tune SIEM rules to reduce false positives and improve detection.
• Stay up-to-date with threats and SIEM best practices.
• Collaborate with IT and security teams to define log source requirements.

Conocimientos

Python

PowerShell

SIEM administration

Educación

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Herramientas

Splunk

QRadar

ArcSight

Descripción del empleo

Placements24 seeks an Information Security Engineer specializing in SIEM to join our team remotely from anywhere in Mexico. You will develop correlation rules, dashboards, and reports, and ensure secure ingestion of logs from diverse sources.

You will analyze alerts, support incident response, and stay current with threats and SIEM best practices while collaborating with IT and security teams to define log source requirements.