Remote SOC Analyst L2/L3 — Threat Detection & IR Expert

Placements24; Oaxaca de Juárez; Hybrid; MXN 400,000 - 600,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Retirement plan

Job summary

Placements24 is seeking an experienced Analista de Seguridad de TI (SOC Analyst L2/L3) to join a 24/7 Security Operations Center. This fully remote role involves advanced monitoring, threat detection, and incident response across a global infrastructure.

The ideal candidate has 4+ years in SOC/IR with strong SIEM experience, threat hunting skills, and proficiency in Python/PowerShell for automation. Certifications such as GCIH/GCFA/CISSP are a plus.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 4+ years in a SOC or incident response role with L2/L3 focus.
• Expertise with SIEM platforms (Splunk, QRadar, LogRhythm).
• Proficiency with EDR, IDS/IPS, network forensics and malware analysis tools.
• Strong threat intelligence understanding and incident containment skills.
• Experience scripting with Python or PowerShell for automation.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, EDR and other tools and perform in-depth analysis.
• Investigate incidents, determine scope, and guide containment and eradication.
• Perform advanced threat hunting and analysis to identify sophisticated threats.
• Develop and refine detection rules and use cases for monitoring tools.
• Respond to incidents according to playbooks and document steps thoroughly.
• Collaborate with Tier 1 analysts and other security teams.
• Stay current with threat intelligence and vulnerabilities.
• Provide technical mentorship to junior analysts (L1).

Skills

SOC analysis

Threat hunting

Incident response

Python/PowerShell

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Splunk

QRadar

LogRhythm

EDR/IDS/IPS

Network forensics

Job description

Placements24 is seeking an experienced Analista de Seguridad de TI (SOC Analyst L2/L3) to join a 24/7 Security Operations Center. This fully remote role involves advanced monitoring, threat detection, and incident response across a global infrastructure.

The ideal candidate has 4+ years in SOC/IR with strong SIEM experience, threat hunting skills, and proficiency in Python/PowerShell for automation. Certifications such as GCIH/GCFA/CISSP are a plus.