Senior Cyber Operations: Incident Response Specialist

EX Squared LATAM; Región Centro; Híbrido; MXN 420.000 - 660.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal/grocery vouchers

Savings fund

Vacation premium

Remote-work allowance

Descripción de la vacante

EX Squared LATAM is assisting a leading client in Mexico with a Senior Associate - Cyber Operations (Incident Response). The role is hands-on, focusing on SOC operations, incident response, threat hunting, forensics, vulnerability remediation, security monitoring, and playbooks.

Ideal candidates have 3+ years in cybersecurity operations and incident response, with working English, and readiness for 10-hour shifts in a hybrid Mexico City/Guadalajara setup.

Formación

• Minimum 3 years of hands-on experience in Cybersecurity Operations, SOC, Incident Response, or similar operational security roles.
• Direct experience participating in security incident investigation and response.
• Hands-on exposure to threat hunting and security monitoring activities.
• Experience supporting or performing forensic analysis during security investigations.
• Experience identifying vulnerabilities, insecure configurations, and security risks and supporting their remediation.
• Experience implementing or working with Incident Response processes and playbooks.
• Understanding of security event analysis, alert triage, escalation, containment, remediation, and post-incident activities.
• Experience configuring, monitoring, or using security technologies within SOC or Incident Response environments.
• Familiarity with endpoint, network, email, threat intelligence, and cloud security concepts.

Responsabilidades

• Participate directly in cybersecurity monitoring, incident investigation, containment, remediation, and response activities.
• Investigate security incidents and alerts to determine scope, severity, impact, and appropriate mitigation actions.
• Conduct threat hunting activities to identify suspicious behaviors and potential threats that may not be detected through standard alerts.
• Support forensic analysis and incident investigations to identify root cause and understand attacker activity.
• Identify vulnerabilities and insecure configurations and coordinate appropriate remediation actions.
• Develop, implement, maintain, and improve incident response processes and playbooks.
• Configure and monitor security tools, including alerts, correlation rules, dashboards, and reporting mechanisms.
• Apply threat intelligence to security monitoring, vulnerability detection, and incident investigations.
• Help determine risk severity and appropriate mitigation approaches for security events.
• Incorporate lessons learned from incidents into improved preventive and detective security controls.
• Support automation and orchestration initiatives that improve the efficiency of monitoring and response processes.
• Collaborate with internal technology, infrastructure, security, and business teams during investigations and remediation efforts.
• Document incident findings, technical evidence, remediation actions, and recommendations clearly.
• Stay current with emerging threats, attacker techniques, security technologies, and cybersecurity operations practices.

Conocimientos

Cybersecurity Operations

SOC

Incident Response

Threat Hunting

Forensic Analysis

Remediation

Security Monitoring

Incident Response Playbooks

English Communication

Herramientas

CrowdStrike

Microsoft Defender for Endpoint

Zscaler

Proofpoint

Recorded Future

Microsoft Azure

Cortex XSOAR

ServiceNow

Descripción del empleo

EX Squared LATAM is assisting a leading client in Mexico with a Senior Associate - Cyber Operations (Incident Response). The role is hands-on, focusing on SOC operations, incident response, threat hunting, forensics, vulnerability remediation, security monitoring, and playbooks.

Ideal candidates have 3+ years in cybersecurity operations and incident response, with working English, and readiness for 10-hour shifts in a hybrid Mexico City/Guadalajara setup.