SOC L3 Analyst (EMEA Regional)

About the role

NXP is looking for an EMEA Regional SOC L3 Analyst in Guadalajara to support its day-to-day defensive information security operations, protecting IT, Operational Technology (OT) and R&D environments. The role covers threat detection, incident response and exposure management, and works with security architects, red teams, product teams and engineering groups. It is also a leadership position for the regional SOC team.

Key responsibilities

• Collaborate with a regional cybersecurity team on threat detection, monitoring and incident response for IT, OT and R&D environments.
• Propose and improve SOC processes, including playbooks, automation and alert triage.
• Provide SOC Tier 3 incident response and coordinate regional cyber incident response, ensuring timely containment, eradication and recovery.
• Integrate security into product development lifecycles with engineering and R&D teams, and ensure compliance with NIST CSF, IEC 62443 and MITRE ATT&CK for ICS.
• Oversee regional vulnerability assessments and risk management, guide patch management and compensating controls, and help implement segmentation, access controls and Zero Trust.
• Work with security and risk peers to anticipate and mitigate risks and meet upcoming regulatory requirements.

Required profile

• 4+ years of cybersecurity experience focused on blue teaming, security operations and cyber defense.
• 2+ years working with the CrowdStrike Falcon platform.
• Foundational expertise in IT and OT security, including ICS, SCADA and industrial cyber threats.
• Experience securing R&D environments, embedded systems and intellectual property.
• Experience leading a team of cybersecurity professionals.
• At least two certifications from the desired list (e.g. CISSP, CCSP, GIAC, CompTIA).

Required skills

• Hands-on experience with SIEM, EDR, NDR, threat intelligence platforms and security automation.
• Knowledge of MITRE ATT&CK (Enterprise and ICS), NIST 800-82, IEC 62443 and Zero Trust.
• Fundamental understanding of cloud security (AWS, Azure, GCP) and hybrid security architectures.