Senior Cyber Incident Response Lead

Check Point Software; Ciudad de México; On-site; MXN 900,000 - 1,500,000; Full time

Job summary

Check Point Software seeks a senior SOC professional with extensive incident response and forensic expertise to manage complex, global cybersecurity incidents. You will lead incident handling, perform root-cause analysis, and develop remediation strategies for major customers.

The role requires 10+ years in cybersecurity with 2–5 years in T3 IR, experience in incident crisis management, and willingness to travel. Domestic and international travel may be required.

Qualifications

• This is not an entry level SOC role and requires substantial experience.
• 10+ years in cybersecurity with 2-5 years in T3 incident response focusing on system compromise.
• Experience with security reviews and vulnerability risk assessments of networks.
• Experience with enterprise security solutions and incident crisis management.
• Ability to participate in on-call rotations, including weekends.

Responsibilities

• Manage daily incident handling for customer incidents.
• Perform incident response and forensic analysis of compromised systems with remediation guidance.
• Direct incident response efforts, prioritize actions, and document attack vectors and methods.
• Manage large, global incidents and coordinate actions across teams.
• Perform large-scale compromise assessments for customer environments.
• Create incident response plans, playbooks, and tabletop attack scenarios.
• Generate detailed incident reports and clearly communicate findings to customers.
• Maintain sandbox/test lab environments to evaluate malicious code.
• Work in a team and coordinate work actions.

Skills

Incident response

System compromise analysis

Forensic analysis

Crisis management

Security reviews

Attack simulation

Team coordination

Education

Bachelor's degree in cybersecurity

Tools

SIEM

EDR

Forensic tools

Job description

Check Point Software seeks a senior SOC professional with extensive incident response and forensic expertise to manage complex, global cybersecurity incidents. You will lead incident handling, perform root-cause analysis, and develop remediation strategies for major customers.

The role requires 10+ years in cybersecurity with 2–5 years in T3 IR, experience in incident crisis management, and willingness to travel. Domestic and international travel may be required.