Cybersecurity Analyst – Threat Hunter

About the role

Kohler Co. is looking for a hands‑on Cybersecurity Analyst who will act as a Threat Hunter within its Security Operations Center. The role blends rapid incident response with proactive hunting to improve detection quality and operational outcomes across the enterprise.

Key responsibilities

• Monitor, triage and investigate security alerts across endpoint, identity, network, cloud and SaaS environments, moving quickly from signal to impact assessment.
• Lead incident investigations, develop timelines, identify affected assets and drive containment actions using both manual and automated playbooks.
• Perform hypothesis‑driven threat hunting, mapping findings to MITRE ATT&CK techniques and translating them into structured queries.
• Feed hunting results back into detection engineering, tune SIEM and EDR rules, and reduce false positives.
• Stay current on attacker tools, techniques and campaigns, and incorporate relevant intelligence into daily detection and hunting activities.
• Contribute to SOC procedures, playbooks and automation/orchestration initiatives.

Required profile

• Technically curious professional who thinks like an attacker and enjoys solving real security problems.
• Ability to work standard business hours with participation in an on‑call rotation.
• Strong analytical mindset and clear written communication for incident documentation.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR) tools
• MITRE ATT&CK framework
• Security analytics and AI‑supported tooling
• Incident response and containment procedures

What we offer

• Hybrid work arrangement in Juarez, Nuevo León.
• Opportunity to influence detection strategy and work with cutting‑edge security technologies.