MDR Analyst: Incident Response & Automation Lead

Acronis; Mexico; On-site; MXN 420,000 - 650,000; Full time

Job summary

Acronis is seeking an MDR Analyst to investigate and triage EDR/XDR incidents within our MDR service, focusing on adversary activity, remediation, and clear customer guidance. You will collaborate with senior staff and the AI engineering team to enhance automation and incident workflows.

Ideal candidates have experience in SOC/MDR environments, a solid understanding of ATT&CK, and proficiency with EDR/SIEM/SOAR tools.

Qualifications

• Experience in SOC, MDR, or IT security operations.
• Strong knowledge of EDR/XDR operations and incident workflows.
• Understanding of MITRE ATT&CK framework and attacker TTPs.
• Knowledge of Windows OS, Active Directory, Linux, Networking.
• Familiar with logs analysis in Kibana or manual reviews.
• Experience working with security tools (EDR, SIEM, SOAR) and interest in automation technologies.
• Solid English written and verbal communication skills (B2 or higher).

Responsibilities

• Investigate incoming EDR/XDR incidents, focusing on accurate triage and severity assessment.
• Execute remediation actions such as workload isolation, following established playbooks.
• Document investigation steps and maintain complete case records.
• Collaborate with AI engineering to test and refine automated triage and response processes.
• Own the incident from the detection to the resolution, with assistance from senior staff if required.
• Support development and refinement of documentation, automation, and incident correlation logic.
• Communicate clearly with customers via email and phone about incident status and recommendations.
• Stay informed about current security threats and attacker techniques.
• Work 5-day/8-hour schedule in office hours, with rotational weekend coverage.

Skills

SOC experience

MDR/EDR/XDR

MITRE ATT&CK

Windows/AD/Linux

Kibana/logs analysis

EDR/SIEM/SOAR tools

English communication

Tools

Automation interest

Job description

Acronis is seeking an MDR Analyst to investigate and triage EDR/XDR incidents within our MDR service, focusing on adversary activity, remediation, and clear customer guidance. You will collaborate with senior staff and the AI engineering team to enhance automation and incident workflows.

Ideal candidates have experience in SOC/MDR environments, a solid understanding of ATT&CK, and proficiency with EDR/SIEM/SOAR tools.