Senior Cyber Defense Engineer: SIEM/SOAR Specialist (Hybrid)

KION Group; Guadalupe; Híbrido; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career Development

Competitive Compensation and Benefits

Pay Transparency

Global Opportunities

Descripción de la vacante

KION Group is seeking a Senior Security Engineer for our Cyber Defense Center in Mexico. You will drive incident response, manage SOAR and SIEM systems, and strengthen security across cloud and on-prem environments.

Join a team that handles worldwide security operations, develops playbooks, tunes detection, and collaborates with customers and peers. Travel up to 10% may be required, and you will work in a hybrid setup.

Formación

• Bachelor’s or Master’s degree in IT or cyber security.
• 3–5 years in security operations or cyber defense center.
• Proficient Python programming.
• Deep IT security knowledge (firewalls, EDR, IDS/IPS, SOAR, forensics).
• Experience with SOAR playbooks for automated SOC operation.
• Knowledge of MITRE ATT&CK framework.
• Ability to travel up to 10% (international).

Responsabilidades

• Set up and continuously develop the KION Cyber Defense Center.
• Handle cyber security incidents and forensic analyses of cyber-attacks.
• Participate in the cybersecurity on-call schedule to ensure worldwide security.
• Program and script using Python and other languages.
• Use SOAR for automation and develop playbooks for SOC operations.
• Develop detection methods for Azure, AWS, and GCP environments.
• Evaluate security logs and distinguish malicious vs benign activity.
• Make clear decisions in high-stress situations.
• Collaborate with customers, peers and key team members.

Conocimientos

Python

Incident response

Threat Hunting

Cloud security

On-prem security

SIEM

SOAR

Educación

Bachelor’s or Master’s degree in IT or Cyber Security

Herramientas

SOAR

Splunk

ELK

Azure

AWS

GCP

Descripción del empleo

KION Group is seeking a Senior Security Engineer for our Cyber Defense Center in Mexico. You will drive incident response, manage SOAR and SIEM systems, and strengthen security across cloud and on-prem environments.

Join a team that handles worldwide security operations, develops playbooks, tunes detection, and collaborates with customers and peers. Travel up to 10% may be required, and you will work in a hybrid setup.