Remote SOC Analyst Consultant (MDR/Threat Hunting)

EmergencyMD; México; Hybride; MXN 600 000 - 900 000; Plein temps

Avantages offerts par ce poste

Private medical insurance

Life insurance

Christmas bonus and technology stipend

Savings fund contribution

Flexible vacation policy

Family-friendly benefits and parental/

Résumé du poste

Echelon Risk + Cyber seeks a seasoned SOC Analyst, Consultant to lead MDR/SOC investigations across client environments. You will mature playbooks, tune detections, and build automation while engaging with executives and technical staff.

Remote work from anywhere in Mexico is supported, with a strong emphasis on incident containment and reporting. The role requires hands-on experience with CrowdStrike Falcon, email security platforms, and multi-cloud exposure.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or equivalent experience.
• Experience as a Tier 2/3 SOC analyst in MDR/SOC environments.

Responsabilités

• Own Tier 2 and Tier 3 investigations and drive containment and recovery.
• Perform hands-on endpoint investigations in EDR/MDR platforms.
• Investigate identity and cloud detections across Microsoft 365, Entra ID, AD, AWS, Azure.
• Triage and investigate email security alerts and provide remediation guidance.

Connaissances

Threat hunting

Incident response

Scripting (PowerShell, Python)

MITRE ATT&CK knowledge

English proficiency

Formation

Bachelor's degree in Information Technology, Computer Science, Cybersecurity

Outils

CrowdStrike Falcon

Microsoft Defender for Office 365

Proofpoint

Mimecast

Splunk

Description du poste

Echelon Risk + Cyber seeks a seasoned SOC Analyst, Consultant to lead MDR/SOC investigations across client environments. You will mature playbooks, tune detections, and build automation while engaging with executives and technical staff.

Remote work from anywhere in Mexico is supported, with a strong emphasis on incident containment and reporting. The role requires hands-on experience with CrowdStrike Falcon, email security platforms, and multi-cloud exposure.