Remote SOC Analyst — Threat Hunter & Incident Investigator

UBQ; Ciudad de México; Remote; MXN 360,000 - 720,000; Full time

Job summary

UBQ is seeking a hands-on SOC Analyst to monitor, triage, and investigate security events across a global, follow-the-sun SOC. This role emphasizes deep understanding of alerts, end-to-end incident handling, and precise handovers between regions in a fully remote environment.

You will work with SIEM, EDR, SSE, and WAF, perform threat hunting, tune detections, and contribute to incident response playbooks. Strong English and collaboration across time zones are essential for success at UBQ.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS or related field.
• At least 3 years hands-on SOC experience triaging alerts in production.
• Solid knowledge of EDR, SSE, SIEM, and WAF for threat investigation.
• Experience configuring/detecting content; incident response and MITRE ATT&CK familiarity.
• Certs such as Security+, CySA+, GCIA, GCIH or vendor creds are a plus.
• Strong analytical and communication skills; English proficiency across teams.
• Ability to work across time zones and handle sensitive information securely.

Responsibilities

• Monitor, triage, and analyze security alerts from SIEM, EDR, SSE, and WAF.
• Investigate incidents end-to-end: triage, containment, eradication, and post-incident docs.
• Determine scope, severity, and escalate incidents per procedures.
• Execute response actions: isolate endpoints, block indicators, and enforce access controls.
• Ensure high-quality cross-region handovers in follow-the-sun model.
• Proactively hunt threats across endpoints, networks, and logs; map to MITRE ATT&CK.

Skills

SOC analysis

Incident investigation

Threat hunting

MITRE ATT&CK

Education

Bachelor's degree in IT / Cybersecurity / CS

Tools

EDR

SIEM

WAF

SSE

Job description

UBQ is seeking a hands-on SOC Analyst to monitor, triage, and investigate security events across a global, follow-the-sun SOC. This role emphasizes deep understanding of alerts, end-to-end incident handling, and precise handovers between regions in a fully remote environment.

You will work with SIEM, EDR, SSE, and WAF, perform threat hunting, tune detections, and contribute to incident response playbooks. Strong English and collaboration across time zones are essential for success at UBQ.