Senior Threat Detection & Response Specialist

Novartis México; Ciudad de México; Híbrido; MXN 900.000 - 1.100.000; Jornada completa

Descripción de la vacante

Novartis México is seeking a Threat Detection and Response Senior Specialist to join our Cyber Security Operations Center in Mexico City. You will monitor, investigate, and mitigate threats impacting networks, systems, and users, coordinating with security leadership and business stakeholders.

The role requires hands-on incident response, SIEM/EDR expertise, and the ability to communicate complex findings to technical and non-technical audiences.

Formación

• Bachelor’s degree or equivalent practical experience.
• 3+ years in cybersecurity with incident response or threat detection.
• Hands-on experience investigating security incidents in enterprise environments.
• Deep understanding of attacker techniques across endpoint, identity, network, cloud, and email surfaces.

Responsabilidades

• Security Monitoring and Triage: monitor in real time security controls and consoles from across the Novartis IT ecosystem.
• Forensics and Incident Response: support incident response activities including scoping, communication, reporting, and long term remediation planning; conduct initial investigations into security incidents.
• Communicate with technical and non-technical end users who report suspicious activity; prepare technical reports for business stakeholders and IT leadership.
• Gather live evidence from endpoint devices and log sources from a variety of systems and applications.
• Big Data analysis and reporting: Utilizing SIEM/Big data to identify abnormal activity and extract meaningful insights; develop content within SIEM and other tools.
• Interface with engineering teams to design, test, and implement playbooks, orchestration workflows and automations; test new technologies and platforms; develop recommendations.
• Perform host based analysis, artifact analysis, network packet analysis, and malware analysis; coordinate investigation and containment; develop and maintain documentation.
• QA review of analyst investigations; develop feedback reports; draft incident analyses for management; identify gaps and improvements; tune sensors and controls.

Conocimientos

Incident response

Threat detection

Security operations

SIEM

EDR/XDR

Technical communication

Educación

Bachelor’s degree in Cybersecurity, CS, IT or related field

Herramientas

SIEM

EDR/XDR

Email security

Identity monitoring

Case management systems

Descripción del empleo

Novartis México is seeking a Threat Detection and Response Senior Specialist to join our Cyber Security Operations Center in Mexico City. You will monitor, investigate, and mitigate threats impacting networks, systems, and users, coordinating with security leadership and business stakeholders.

The role requires hands-on incident response, SIEM/EDR expertise, and the ability to communicate complex findings to technical and non-technical audiences.