Senior Associate, Cybersecurity Incident Response - Advanced English

KTSA - KPMG Technology Services Americas; Mexico; Hybrid; PHP 1,475,000 - 2,435,000; Full time

Benefits offered by this job

Extended maternity leave

Extended paternity leave

Adoption leave

Learning and certification programs

Wellness programs

Comprehensive medical plan

Life insurance

Car insurance

Funeral assistance

Job summary

KTSA – KPMG Technology Services Americas seeks an experienced cybersecurity professional to strengthen our 24x7 operations, incident response, and threat mitigation. You will coordinate investigations, implement automation, and collaborate with internal teams to ensure robust protection of client assets.

We value senior expertise in security monitoring, threat intelligence, and mentoring, with opportunities to grow within our global KPMG network.

Qualifications

• Minimum three years of experience in cybersecurity operations and incident response.
• Bachelor's degree preferred; relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900 are preferred.
• Experience with scripting or automation, and ServiceNow.
• Palo Alto Cortex XSOAR is a plus.
• Excellent verbal/written English communication, collaboration, analytical and presentation skills.

Responsibilities

• Utilize expertise in IT security, security operations, and incident response to maintain robust 24x7 cybersecurity operations and swift handling of incidents.
• Handle and coordinate incident management, threat hunting, forensic analysis, and remediation to mitigate threats.
• Configure and monitor security tools, implement automation and orchestration for a unified monitoring and response workflow.
• Leverage threat intelligence to evaluate events, assess risk severity, and implement preventive and detective controls.
• Mentor the team, share knowledge, and collaborate with internal tech groups for strategic alignment.
• Develop work products and support small projects, threat assessments, and incident investigations while meeting deadlines.

Skills

Cybersecurity operations

Incident response

Security monitoring

Automation scripting

English communication

Education

Bachelor's degree preferred

Certifications like CISSP/CCSP/GCFA etc.

Tools

ServiceNow

Cortex XSOAR

CrowdStrike

Zscaler

Proofpoint

Recorded Future

Job description

We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore.

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

• Experience a collaborative, inclusive, and multicultural workplace where you belong.
• Excel by creating impact and leaving your mark on global projects.
• Expand your potential with real career paths, learning programs, and mentorship.
• Express your individuality — come as you are, and thrive as your authentic self.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS, our total rewards program, designed to support your well-being, goals, and personal milestones.

Key Responsibilities:

• Utilize your expertise in IT security, security operations, and incident response to enhance and maintain robust 24x7 cybersecurity operations, ensuring swift and effective handling of incidents and ongoing protection of organizational assets.
• Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats. Conduct regular assessments to identify vulnerabilities and insecure configurations and review security change requests to ensure robust protective measures.
• Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms. Implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution.
• Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls.
• Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration.
• Develop work product(s) and support small projects, threat assessments, and incident investigations while managing deadlines, expectations, and contributing to staffing decisions.

Required Qualifications:

• Minimum three years of experience in cybersecurity operations with experience implementing processes and playbooks in cybersecurity monitoring and incident response activities
• Bachelor's degree from an accredited college or university is preferred; relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900 are preferred
• Experience with scripting or automation, and ServiceNow
• Palo Alto Cortex XSOAR is a plus
• Excellent verbal/written English communication, collaboration, analytical and presentation skills.

Skills:

• CrowdStrike
• Zscaler

Email Protection

• Proofpoint
• Recorded Future
• Orchestration and Automation Cortex XSOAR

Cloud

• Python (preferred)
• Shell Script

Working hours:

Sunday - Wednesday or Wednesday to Saturday

• 7:00am to 5:00pm or 1pm to 11:00pm

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

• Extended maternity, paternity, and adoption leaves
• Learning opportunities, training, and certification programs
• Extended marriage leave and daycare support
• Wellness and Employee Assistance Programs (EAP)
• Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit www.ktsa.com.mx to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of flexible working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

Home - KTSA

KTSA - KPMG Technology Services of Americas