Analista de Ciberseguridad SOC

About the role

The company, a leader in the automotive industry, is building a Security Operations Center (SOC) in Nuevo León, México. As a Cybersecurity Analyst you will join a global team to detect, investigate, and respond to security incidents across the enterprise.

Key responsibilities

• Monitor security alerts from multiple platforms and triage incidents.
• Investigate, contain, and remediate security events following the full incident‑response lifecycle.
• Develop and tune correlation rules using MITRE ATT&CK, US‑CERT and other threat‑intel sources.
• Manage SOAR‑driven workflows, create tickets and coordinate response actions.
• Analyze logs from SIEM, IDS/IPS, firewalls, endpoint tools and cloud services.
• Collaborate with cross‑functional teams to improve security processes and reduce operational gaps.

Required profile

• 3‑5 years of experience in a SOC or cybersecurity operations role (Tier 2/3 or lead).
• Excellent written and verbal communication skills in English.
• Proven ability to handle incidents from detection through remediation.
• Strong understanding of network security, operating systems and common attack techniques.

Required skills

• CEH certification (preferred).
• Hands‑on experience with Splunk SIEM and SOAR platforms.
• Endpoint Detection and Response (EDR) solutions.
• Google Cloud Platform security.
• IDS/IPS, firewalls, HIPS, antivirus and vulnerability scanners.
• MITRE ATT&CK framework.
• Google SIEM, CrowdStrike Falcon, Cisco network devices.
• Nexpose, InsightVM, SCCM, Bitlocker, Zscaler, Proofpoint.
• ServiceNow, TrendMicro, Okta, Azure, Office 365.
• Email security platforms, Identity & Access Management, Threat Intelligence and Vulnerability Management tools.