Remote SOC Analyst Consultant (MDR/Threat Hunting)

EmergencyMD; México; Híbrido; MXN 600.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical insurance

Life insurance

Christmas bonus and technology stipend

Savings fund contribution

Flexible vacation policy

Family-friendly benefits and parental/

Descripción de la vacante

Echelon Risk + Cyber seeks a seasoned SOC Analyst, Consultant to lead MDR/SOC investigations across client environments. You will mature playbooks, tune detections, and build automation while engaging with executives and technical staff.

Remote work from anywhere in Mexico is supported, with a strong emphasis on incident containment and reporting. The role requires hands-on experience with CrowdStrike Falcon, email security platforms, and multi-cloud exposure.

Formación

• Bachelor's degree in IT, CS, cybersecurity or equivalent experience.
• Experience as a Tier 2/3 SOC analyst in MDR/SOC environments.

Responsabilidades

• Own Tier 2 and Tier 3 investigations and drive containment and recovery.
• Perform hands-on endpoint investigations in EDR/MDR platforms.
• Investigate identity and cloud detections across Microsoft 365, Entra ID, AD, AWS, Azure.
• Triage and investigate email security alerts and provide remediation guidance.

Conocimientos

Threat hunting

Incident response

Scripting (PowerShell, Python)

MITRE ATT&CK knowledge

English proficiency

Educación

Bachelor's degree in Information Technology, Computer Science, Cybersecurity

Herramientas

CrowdStrike Falcon

Microsoft Defender for Office 365

Proofpoint

Mimecast

Splunk

Descripción del empleo

Echelon Risk + Cyber seeks a seasoned SOC Analyst, Consultant to lead MDR/SOC investigations across client environments. You will mature playbooks, tune detections, and build automation while engaging with executives and technical staff.

Remote work from anywhere in Mexico is supported, with a strong emphasis on incident containment and reporting. The role requires hands-on experience with CrowdStrike Falcon, email security platforms, and multi-cloud exposure.