Sr Cyber Security Architect/Engineer

Resideo; Chihuahua; Presencial; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Resideo is seeking a Senior Cyber Security Engineer to lead advanced analytics, investigations, and SOC modernization. You will guide automation, detection content development, and threat hunts while collaborating with architecture, network, data center, HR, Legal, and third parties.

The role requires senior technical leadership within Security Operations, ensuring regulatory readiness and strong incident response capabilities across cloud-native and on-prem environments.

Formación

• Minimum 5 years of cybersecurity or SOC experience.
• Excellent documentation and communication skills.
• Certifications: GSEC, Security+, CISSP (preferred or in progress).
• Deep understanding of network protocols, IDS/IPS, SIEM, firewalls, proxies, and DLP technologies.
• Strong understanding of incident response frameworks and advanced threat actor behaviors.
• Ability to prioritize in a dynamic, fast-paced environment.
• Advanced written and verbal English communication skills.

Responsabilidades

• Continuously assess emerging threats and evaluate SOC tools, architectures, and workflows for improvement.
• Lead identification, investigation, and remediation of advanced security events and incidents.
• Develop cybersecurity policies and DLP standards aligned with organizational risk posture.
• Lead SIEM, SOAR, and XDR engineering, correlation rule development, and detection content optimization.
• Drive automation design and orchestration to increase SOC efficiency and reduce response times.
• Lead deep-dive threat hunting, hypothesis-driven investigations, and adversary simulation.

Conocimientos

SOC engineering

SIEM

XDR

SOAR

DLP

Threat hunting

Herramientas

SIEM tooling

SOAR platforms

XDR tooling

Descripción del empleo

Job Description

The Senior Cyber Security Engineer, is a senior technical leader within the Security Operations function, responsible for advanced analytics, complex investigations, tool engineering, and driving Security Operations Center (SOC) capability maturity. This role proactively identifies and responds to sophisticated threats, advances detection capabilities, and guides the SOC toward higher automation, intelligence‑driven operations, and continuous improvement aligned with industry best practices and Gartner L4 maturity. Reports to: Cyber Security Director.

JOB DUTIES:

• Continuously assess emerging threats and evaluate SOC tools, architectures, and workflows for improvement.
• Recommend and implement standardized, scalable approaches for SOC technologies and processes.
• Develop and enhance SLAs, KPIs, and operational reporting for security tooling and SOC effectiveness.
• Maintain and enhance SOC policies, documentation, and procedures.
• Lead identification, investigation, and remediation of advanced security events and incidents.
• Ensure audit trails and evidence-handling standards support incident investigation and regulatory requirements.
• Develop cybersecurity policies and DLP standards aligned with organizational risk posture.
• Manage and investigate data‑loss events to ensure risks are mitigated.
• Execute and enforce security policy, exception management, and risk controls.
• Provide Tier 3 technical escalation support for SOC incidents and engineering issues.
• Collaborate closely with architecture, network, data center, HR, Legal, and third parties during investigations.
• Lead and contribute to complex cybersecurity and SOC modernization projects.
• Mentor and develop SOC engineers and analysts to strengthen capabilities.
• Provide leadership input into planning, deployment, and optimization of new and existing security initiatives.
• Lead SIEM, SOAR, and XDR engineering, correlation rule development, and detection content optimization.
• Drive automation design and orchestration to increase SOC efficiency and reduce response times.
• Lead deep‑dive threat hunting, hypothesis‑driven investigations, and adversary simulation.
• Guide cloud‑native security monitoring and detection engineering.

YOU MUST HAVE:

• Minimum 5 years of cybersecurity or SOC experience.
• Excellent documentation and communication skills.
• Certifications: GSEC, Security+, CISSP (preferred or in progress).
• Deep understanding of network protocols, IDS/IPS, SIEM, firewalls, proxies, and DLP technologies.
• Strong understanding of incident response frameworks and advanced threat actor behaviors.
• Ability to prioritize in a dynamic, fast‑paced environment.
• Advanced written and verbal English communication skills.

WE VALUE:

• Experience with modern SOC engineering (SOAR automation, XDR implementation, cloud monitoring).
• Strong experience developing detection rules, tuning alerts, and engineering log ingestion pipelines.
• Proven ability to lead investigations involving advanced persistent threats (APTs).
• Additional certifications (GCIA, GCFE, GDAT, GCTI, etc.).

BEHAVIORAL COMPETENCES:

• Ability to lead and influence across teams and stakeholders.
• Strong adaptability, decision-making, and urgency in high‑pressure environments.
• Exceptional communication, collaboration, and mentorship abilities.
• Ability to absorb and apply new technologies quickly.

WHAT'S IN IT FOR YOU?

• Benefits that go beyond Mexican labor law, ensuring your well‑being and peace of mind.
• A collaborative and inclusive work environment where your contributions are valued.
• Opportunities for continuous professional growth and skill development through training, mentoring, and challenging projects.
• Access to cutting‑edge tools, resources, and a supportive team to help you excel.
• The chance to work with a global, innovative company shaping the future in its industry.

About Us

Resideo is a global leader in smart home and building solutions, with trusted brands including Honeywell Home, First Alert, and Resideo helping people feel more comfortable, secure, connected, and in control every day. Our products and technologies are found in more than 150 million homes and businesses worldwide. From intelligent climate solutions to security, sensing, water, and connected home technologies, Resideo develops and manufactures products designed to simplify everyday life and help protect what matters most. Our global teams span engineering, manufacturing, software, product management, supply chain, customer experience, and more — all working together to shape the future of connected living through innovation, quality, and meaningful real‑world impact. At Resideo, our teams help create products and experiences that make everyday life more comfortable, secure, and connected for millions around the world. Learn more at www.resideo.com .

You can find out more about how the talent community works here: Resideo Talent Community Terms . Our recruitment privacy notice Resideo -Recruitment Privacy Notice - Dec 16 2022 describes in more detail how we process your personal data and how you can exercise your personal data rights.

If a disability prevents you from applying for a job through our website, request assistance here.

JOB INFO

Job Identification : 18048

Job Category : Cyber Security

Posting Date : 2026-03-11T19:31:10+00:00

Job Schedule : Full time

Locations : Avenida Palmira No 351. 5to Piso, San Luis Potosi, 78295, MX; Av. Victor Hugo No. 11517, Chihuahua, 31136, MX

(Hybrid)

Incentive Eligible : N/A

Business : Resideo

Hiring Salary Range : At Resideo, we are committed to inclusive and equitable compensation. Salaries are determined by factors like role responsibilities, candidate qualifications, and geographic location. We also provide additional benefits tailored to your location and role.