Security Analyst

Gravity IT Resources; Monterrey; Presencial; MXN 600.000 - 800.000; Jornada completa

Descripción de la vacante

A leading IT resources firm located in Monterrey is seeking an experienced Information Security Analyst II to lead the analysis of security events and manage incident responses. This role demands over 5 years of experience in a Security Operations Center, strong knowledge of cybersecurity fundamentals, and a preferred CEH certification. The company offers a collaborative environment with opportunities for professional growth.

Formación

• 5+ years working in a Security Operations Center environment.
• Excellent knowledge of IDS/IPS and network security products.
• Ability to analyze and interpret security incidents.

Responsabilidades

• Lead the analysis and investigation of information security events.
• Perform monitoring and response to security incidents.
• Prepare reports for internal and external stakeholders.

Conocimientos

Incident response experience

Intrusion Detection

TCP/IP knowledge

Windows/UNIX operating systems

Cybersecurity fundamentals

Educación

Bachelor's degree in engineering or related field

Herramientas

Splunk

Cisco network devices

CrowdStrike

Microsoft 365

Descripción del empleo

The Security Operations Center (SOC) Information Security Analyst II will be part of the SOC team that monitors, analyzes, and responds to infrastructure threats and vulnerabilities on a 24×7 basis.

Responsibilities

• Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24×7 SOC environment to detect, verify, and respond swiftly to cyber threats, while minimizing false positives.
• Perform monitoring, research, assessment, and analysis of security incidents requiring demonstrable incident response experience.
• Serve as a technical point of escalation and provide mentoring for L1 SOC analysts.
• Handle security alerts in Splunk SIEM and raise tickets based on alerts.
• Follow up with respective teams to close alerts and tickets.
• Analyze and assess security incidents and elevate to appropriate internal teams for additional assistance.
• Investigate incidents, analyze attack methods, research new defense techniques and tools, develop security policies, and document SOC procedures.
• Conduct malware and attack analysis to extract indicators of compromise and perform event correlation between various systems.
• Prepare reports, summaries, and other forms of communication for internal and external stakeholders.
• Maintain familiarity with industry trends and security best practices.
• Ensure SLA compliance, process adherence, and continuous improvement to meet operational objectives.
• Periodically update or create correlation rules based on emerging threats and intelligence sources such as MITRE ATT&CK, US‑CERT, and other TTP databases.

Basic Qualifications

• Education and Experience: 5+ years working in a Security Operations Center environment; Bachelor’s degree in engineering or related field preferred.
• Knowledge and Skills: Excellent knowledge of Intrusion Detection (deep TCP/IP understanding, cybersecurity fundamentals), multiple operating systems (Windows/UNIX), and web technologies (with a focus on Internet security). Ability to read and interpret packet‑level data. Familiarity with intrusion detection and prevention, network security products (IDS/IPS, firewalls), and host security tools (HIPS, AV, scanners). Understanding of emerging threats, web application vulnerabilities, and current cyberattack trends. Exposure to vulnerability assessment, penetration testing, or forensic analysis is an advantage. Experience working as part of a distributed, global team across multiple time zones and cultures.
• Preferred Certifications and Skills: CEH (Certified Ethical Hacker) preferred.

Tools and Technologies

• Required: Microsoft Office.
• Strongly Preferred: Cisco network devices, Nexpose or InsightVM, Splunk, CrowdStrike, SCCM, BitLocker, Zscaler, Proofpoint, ServiceNow, Trend Micro, Okta, Azure, and Microsoft 365.

Physical Demands and Working Conditions

• Primarily office‑based work; potential international travel up to 5%.

Seniority level

• Mid‑Senior level

Employment type

• Contract

Job function

• Information Technology
• Industries: Manufacturing and Staffing and Recruiting