Security Engineer III: Detection & Incident Response

Jobgether; México; Remote; MXN 850,000 - 1,350,000; Full time

Benefits offered by this job

Remote work: Fully remote

Equity

Paid time off: 25 days

Coworking access

Team events

Equipment

Home office support £500

Learning and development budget

Healthcare: Private medical insurance

Additional perks: location-based

Professional onboarding and support

Job summary

Jobgether, in collaboration with a partner, is seeking a Security Engineer III - Security Operations based in Mexico. You will own detection and response capabilities, build SIEM detections in Elastic and AWS, and automate workflows with Python and IaC.

You will triage alerts, investigate incidents, document findings, and contribute to PCI DSS/SOC 2 compliance while participating in on-call rotations, with a focus on security maturity and efficiency.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections (Elastic preferred).
• Practical experience securing AWS environments and cloud-native detection/response.
• Proficiency in Python for scripting and security tooling.
• Experience with Terraform or other IaC technologies.
• Strong knowledge of MITRE ATT&CK framework and its application.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives.
• Build and tune security detections across Elastic SIEM and AWS.
• Triage alerts and investigate incidents to drive resolution.
• Document investigations and findings for follow-up actions.

Skills

SIEM detections

Python

AWS security

Terraform

MITRE ATT&CK

Incident response

On-call rotation

Tools

Elastic

Splunk

Microsoft Sentinel

Terraform

Job description

Jobgether, in collaboration with a partner, is seeking a Security Engineer III - Security Operations based in Mexico. You will own detection and response capabilities, build SIEM detections in Elastic and AWS, and automate workflows with Python and IaC.

You will triage alerts, investigate incidents, document findings, and contribute to PCI DSS/SOC 2 compliance while participating in on-call rotations, with a focus on security maturity and efficiency.