Security Operations Lead - Incident Response & Automation

Levi Strauss & Co.; Ciudad de México; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

Levi Strauss & Co. is seeking a Security Operations Lead to drive the day-to-day operations of the Security Operations team within Global Information Security.

You will oversee L2 and L3 support for enterprise security tools, manage incident response, and spearhead improvements to strengthen the organization’s security posture. You will lead a team, mentor members, and collaborate with infrastructure, cloud, and identity teams to implement robust security controls and proactive monitoring across

Qualifications

• 5+ years of experience in security operations, security engineering, or related cybersecurity discipline.
• 1-2 years experience leading or managing security teams.
• Strong knowledge of security operations practices, incident response, threat detection, vulnerability management, and network security concepts.

Responsibilities

• Lead, coach, and develop a team of security operations professionals with day-to-day guidance.
• Oversee security monitoring, L2/L3 tool support, and incident response to ensure timely investigations.
• Drive operational excellence through automation, runbooks, and improvements across security controls.
• Collaborate with infrastructure, cloud, identity, and security teams to strengthen enterprise security.

Skills

Security operations

Incident response

Threat detection

Vulnerability management

Team leadership

Education

Bachelor's degree in CS / Cybersecurity

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

AWS

Azure

Google Cloud Platform

Job description

Levi Strauss & Co. is seeking a Security Operations Lead to drive the day-to-day operations of the Security Operations team within Global Information Security.

You will oversee L2 and L3 support for enterprise security tools, manage incident response, and spearhead improvements to strengthen the organization’s security posture. You will lead a team, mentor members, and collaborate with infrastructure, cloud, and identity teams to implement robust security controls and proactive monitoring across