SOC L3 Analyst

NXP Semiconductors; Región Centro; Presencial; MXN 600.000 - 800.000; Jornada completa

Descripción de la vacante

NXP Semiconductors is seeking an EMEA Regional SOC Analyst to strengthen defenses across IT, OT, and R&D environments. You will drive threat detection, incident response, and exposure management while collaborating with security architects, red teams, product teams, and engineering groups to raise the organization’s security posture.

As a regional SOC leader, you will develop security strategies, coordinate with regional teams, implement playbooks and automation, and ensure timely containment

Formación

• 4+ years of cybersecurity experience with a focus on blue teaming, security operations and cyber defense.
• 2+ years of experience with CrowdStrike Falcon Platform.
• Hands-on experience with SIEM, EDR, NDR and security automation.
• Knowledge of IT and OT security, including IC/SCADA and embedded systems.

Responsabilidades

• Collaborate with regional cybersecurity teams on threat detection, monitoring, and incident response for IT, OT and R&D environments.
• Improve SOC processes, playbooks, automation, and alert triage.
• Provide SOC Tier 3 incident response and coordinate regional containment, eradication, and recovery.
• Oversee vulnerability assessments and risk management across IT, OT, and R&D; guide patching and zero-trust strategies.
• Align with NIST CSF, IEC 62443, MITRE ATT&CK for IC/SCADA; integrate security into product lifecycles.

Conocimientos

Blue team / security operations

Team leadership

IT and OT security knowledge

R&D security (embedded systems)

Industrial control systems security

Threat intelligence

Herramientas

CrowdStrike Falcon Platform

SIEM

EDR

NDR

Descripción del empleo

Role Summary:

The EMEA Regional SOC Analyst at NXP will be tasked with assisting in our day-to-day defensive information security operations, ensuring the security of IT, Operational Technology (OT), and R&D environments. This role is responsible for maintaining threat detection, incident response, and exposure management. As an EMEA Regional SOC Analyst, you will develop and implement security strategies to protect against evolving cyber threats across diverse environments. You will collaborate with security architects, red teams, product teams, and engineering groups to strengthen our organization's overall security posture. This role is pivotal leader for our regional security operations center team members, to ensure the continuity of information security operations.

Your opportunity:

NXP is a global player in Semiconductor industry, and security is an essential and integral part of our business. Security Operations & Threat Defense

Job Responsibility:

Operational Mentality and Vision:

• Collaborate with a regional team of cybersecurity professionals focused on threat detection, monitoring, and incident response for IT, OT, and R&D environments.
• Propose and enhance Security Operations Center (SOC) processes, including playbooks, automation, and alert triage.

Incident Response

Provide SOC Tier 3 Incident response capabilities and coordinate regional cyber incident response efforts, ensuring timely containment, eradication, and recovery.

OT & R&D Security Strategy:

• Limited experience in security controls and frameworks tailored for IC/SCADA, industrial IoT (IIoT), and embedded systems in OT environments.
• Ability to work closely with regional engineering and R&D teams to integrate security into product development lifecycles.
• Ensure compliance with industry regulations and frameworks such as NIST CSF, IEC 62443, and MITRE ATT&CK for IC/SCADA.

Vulnerability Management & Hardening

Oversee regional vulnerability assessments and risk management programs across IT, OT, and R&D. Guide patch management and compensating controls for systems where direct patching is not feasible. Work with asset owners to implement segmentation, access controls, and Zero Trust strategies.

Risk Management and Ethical Considerations

Work closely with regional security and risk peers to foresee and mitigate risks, ensuring ethical operations and compliance with upcoming regulations.

Job Qualification:

Required Qualifications & Experience:

• 4+ years of experience in cybersecurity with a focus on blue teaming, security operations, and cyber defense.
• 2+ years working with the Crowdstrike Falcon Platform
• Required at least two (2) of the Certifications from the "Desired Certifications" list.
• Foundational expertise in both IT and OT security, with knowledge of IC/SCADA, industrial cyber threats.
• Experience securing R&D environments, including embedded systems, proprietary technologies, and intellectual property.
• Hands-on experience with SIEM, EDR, NDR, threat intelligence platforms, and security automation.
• Knowledge of MITRE ATT&CK (Enterprise & IC/SCADA), NIST 800-82, IEC 62443, and Zero Trust principles.
• Experience leading a team of cybersecurity professionals and developing operational security teams.
• Fundamental understanding of cloud security (AWS, Azure, GCP) and hybrid security architectures.

Desired Certifications

• GIAC Associate Certified Incident Handler
• GIAC Associate Security Operations Certified
• GIAC Security Essentials (GSEC)
• Associate Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• COMPTIA Security +
• COMPTIA CYSA+
• AWS Certified Security
• Microsoft SC - 200

More information about NXP in Mexico...