Senior Threat Detection & Incident Response Specialist

Biopharma Careers; Ciudad de México; Híbrido; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Novartis in Mexico City is seeking a Senior Specialist to join the CSOC for Threat Detection & Response. You will detect, investigate, and mitigate threats impacting networks, systems, users, and applications, coordinating with security leadership and business stakeholders.

The role requires 3+ years in cybersecurity, with hands-on SIEM/EDR/XDR experience and strong communication, documentation, and collaboration skills to drive improvements across the security program.

Formación

• Bachelor’s degree or equivalent practical experience in cybersecurity or related field.
• 3+ years of cybersecurity experience focusing on incident response or threat detection.
• Hands-on experience investigating security incidents in enterprise environments.
• Deep understanding of attacker techniques across endpoint, identity, network, cloud, and email surfaces.
• Experience in CSOC/SOC or incident response in large organizations.
• Knowledge of security operations workflows, alert triage, escalation and response coordination.
• Experience with SIEM, EDR/XDR, email security, identity monitoring, and case management.
• Ability to analyze logs and forensic artifacts to determine scope and actions.
• Strong written and verbal communication; able to brief senior stakeholders.
• Ability to identify operational improvements and drive enhancements without people management.

Responsabilidades

• Monitor real-time security controls and consoles across the IT ecosystem.
• Support incident response including scoping, reporting, and remediation planning.
• Communicate with technical and non-technical end users; prepare technical reports for stakeholders.
• Gather live evidence from endpoints and logs.
• Utilize SIEM/Big data to identify anomalies and extract insights.
• Design, test, and implement playbooks and automation with engineering teams.
• Perform host, artifact, network packet, and malware analysis for investigations.
• Develop and maintain response playbooks and procedures.
• Mentor junior staff and act as escalation for high-severity incidents.
• Evaluate detection/mitigation capabilities with solution owners.

Conocimientos

Incident response

Threat detection

Security operations

SIEM

EDR/XDR

Team mentoring

Communication skills

Educación

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology

Herramientas

SIEM

EDR/XDR

Case management

Descripción del empleo

Novartis in Mexico City is seeking a Senior Specialist to join the CSOC for Threat Detection & Response. You will detect, investigate, and mitigate threats impacting networks, systems, users, and applications, coordinating with security leadership and business stakeholders.

The role requires 3+ years in cybersecurity, with hands-on SIEM/EDR/XDR experience and strong communication, documentation, and collaboration skills to drive improvements across the security program.