Cyber Defense Analyst — 24/7 Incident Response

LUMA Energy; San Juan (PR); On-site; USD 95,000 - 130,000; Full time

Job summary

LUMA Energy in San Juan, Puerto Rico, is seeking a seasoned cybersecurity professional to join our Security Operations Center. You will triage alerts, investigate threats, and coordinate incident response to protect critical IT and OT environments.

Responsibilities include threat hunting, vulnerability reviews, updating playbooks, and collaboration with cross-functional teams to ensure continuous 24/7 readiness and compliance with industry regulations.

Qualifications

• Networking and traffic analysis using TCP/IP, protocols, firewalls, VPNs, and IDS/IPS.
• OS and scripting fundamentals in Windows/Linux; basic Python/PowerShell/Bash.
• Familiarity with NIST CSF, MITRE ATT&CK, ISO 27001 and defense-in-depth.
• Ability to analyze logs, correlate events, and identify suspicious activity.
• Clear written and verbal communication in English and Spanish.

Responsibilities

• Triage security alerts to determine root cause and prioritize incident handling.
• Investigate suspicious activity across SIEM, email, and network telemetry for evidence-based findings.
• Coordinate incident response with cross-functional teams and document lessons learned.

Skills

Networking & Traffic Analysis

OS, Scripting & Forensics

Cybersecurity Frameworks

Event Analysis & Security Monitoring

Analytical & Communication Skills

Education

Bachelor's degree

Tools

Sumo Logic

CrowdStrike

Security monitoring tools

Job description

LUMA Energy in San Juan, Puerto Rico, is seeking a seasoned cybersecurity professional to join our Security Operations Center. You will triage alerts, investigate threats, and coordinate incident response to protect critical IT and OT environments.

Responsibilities include threat hunting, vulnerability reviews, updating playbooks, and collaboration with cross-functional teams to ensure continuous 24/7 readiness and compliance with industry regulations.