Senior Cyber Incident Response & Threat Hunter

Jobtailor; Mexico; On-site; MXN 420,000 - 660,000; Full time

Job summary

Jobtailor is seeking a dedicated Cybersecurity Operations professional in Mexico City to lead monitoring, incident response, and threat hunting efforts. You will investigate incidents, perform forensic analysis, and implement robust playbooks and automation to strengthen security controls.

The role requires hands‑on experience in security monitoring, vulnerability remediation, and cross‑team collaboration, with 24x7 shift readiness and strong English communication.

Qualifications

• Minimum 3 years of hands‑on experience in Cybersecurity Operations, SOC, Incident Response, or similar operational security roles.
• Direct experience participating in security incident investigation and response.
• Hands‑on exposure to threat hunting and security monitoring activities.
• Experience supporting or performing forensic analysis during security investigations.
• Experience identifying vulnerabilities, insecure configurations, and security risks and supporting their remediation.
• Experience implementing or working with Incident Response processes and playbooks.
• Understanding of security event analysis, alert triage, escalation, containment, remediation, and post‑incident activities.
• Experience configuring, monitoring, or using security technologies within SOC or Incident Response environments.
• Familiarity with endpoint, network, email, threat intelligence, and cloud security concepts.
• Strong analytical and troubleshooting skills and the ability to investigate complex security events.
• Ability to clearly communicate technical findings, risks, and recommended actions to different audiences.
• Strong written and verbal English communication skills.
• Advanced English.

Responsibilities

• Participate directly in cybersecurity monitoring, incident investigation, containment, remediation, and response activities.
• Investigate security incidents and alerts to determine scope, severity, impact, and appropriate mitigation actions.
• Conduct threat hunting activities to identify suspicious behaviors and potential threats.
• Support forensic analysis and incident investigations to identify root cause and understand attacker activity.
• Identify vulnerabilities and insecure configurations and coordinate appropriate remediation actions.
• Develop, implement, maintain, and improve incident response processes and playbooks.
• Configure and monitor security tools, including alerts, correlation rules, dashboards, and reporting mechanisms.
• Apply threat intelligence to security monitoring, vulnerability detection, and incident investigations.
• Determine risk severity and appropriate mitigation approaches for security events.
• Incorporate lessons learned into improved preventive and detective security controls.
• Support automation and orchestration initiatives that improve monitoring and response efficiency.
• Collaborate with internal technology, infrastructure, security, and business teams during investigations and remediation.
• Document incident findings, technical evidence, remediation actions, and recommendations.
• Stay current with emerging threats, attacker techniques, security technologies, and cybersecurity operations practices.
• Work with international teams on sophisticated cybersecurity operations and Incident Response initiatives.

Skills

Cybersecurity Operations

Incident Response

Threat Hunting

Forensic Analysis

Vulnerability Identification

Security Monitoring

Automation and Orchestration

Scripting (Python, Shell)

Security Tool Configuration

Threat Intelligence Application

Post-Incident Activities

Tools

CrowdStrike

Microsoft Defender for Endpoint

Zscaler

Proofpoint

Recorded Future

Microsoft Azure

Palo Alto Cortex XSOAR

ServiceNow

Job description

Jobtailor is seeking a dedicated Cybersecurity Operations professional in Mexico City to lead monitoring, incident response, and threat hunting efforts. You will investigate incidents, perform forensic analysis, and implement robust playbooks and automation to strengthen security controls.

The role requires hands‑on experience in security monitoring, vulnerability remediation, and cross‑team collaboration, with 24x7 shift readiness and strong English communication.