Remote InfoSec Engineer: Incident Response & Threat Hunting

Oportun; Mexico; On-site; PHP 7,486,000 - 11,229,000; Full time

Job summary

Oportun in the United States is seeking an Information Security Engineer to lead cybersecurity investigations across cloud, endpoint, identity, SaaS, email, and network environments. This role identifies, contains, and remediates incidents while correlating data from SIEM, EDR, cloud, and identity tools.

The ideal candidate has hands-on incident response, threat hunting, and detection engineering experience, with knowledge of Windows, Linux, AWS, Active Directory, and modern identity attacks.

Qualifications

• Experience leading cybersecurity investigations from detection to remediation.
• Familiarity with SIEM platforms (e.g., Splunk) for threat hunting.
• Experience across cloud, endpoint, identity, SaaS, and network environments.
• Ability to document investigations and communicate findings clearly.

Responsibilities

• Lead cyber investigations across cloud, endpoint, identity, SaaS, email, and network.
• Contain and remediate security incidents with cross-team coordination.
• Develop and tune detections and SIEM use cases.
• Support automation and AI-assisted security workflows.

Skills

Incident response

Threat hunting

Detection engineering

Automation

Communication

Education

Bachelor's degree in CS / Cybersecurity / information systems

Tools

Splunk

EDR

Kubernetes

SOAR

Wiz CNAPP

GitHub

Job description

Oportun in the United States is seeking an Information Security Engineer to lead cybersecurity investigations across cloud, endpoint, identity, SaaS, email, and network environments. This role identifies, contains, and remediates incidents while correlating data from SIEM, EDR, cloud, and identity tools.

The ideal candidate has hands-on incident response, threat hunting, and detection engineering experience, with knowledge of Windows, Linux, AWS, Active Directory, and modern identity attacks.