Cybersecurity Analyst – SOC (Nuevo León, Mexico)

About the role

We are looking for a Cybersecurity Analyst to join our Security Operations Center (SOC) team in Nuevo León, Mexico. The role focuses on detecting, investigating, and responding to security incidents across our enterprise environment, while continuously improving our security processes.

Key responsibilities

• Monitor, triage, and respond to alerts from multiple security platforms.
• Investigate security incidents end‑to‑end, including containment, eradication, recovery and post‑incident documentation.
• Manage and track security cases using SOAR workflows.
• Analyze logs and event data from SIEM, EDR and cloud services.
• Develop and refine detection rules, playbooks and response processes.
• Collaborate with engineering and other teams to enhance monitoring and detection capabilities.

Required profile

• 3‑5 years of experience in a SOC or cybersecurity operations role (Tier 2/3 or lead).
• Bachelor’s degree in Cybersecurity, Computer Science, IT or equivalent experience.
• Relevant certifications such as CompTIA Security+, CySA+, Google Cloud Security, Incident Handler, CEH, etc.
• Excellent written and verbal communication skills in English.
• Proven experience handling the full incident response lifecycle.
• Strong understanding of network security fundamentals, operating systems, authentication and common attack techniques.

Required skills

• SOAR platforms (Google SecOps/Chronicle, PaloAlto, Torq or similar).
• Scripting languages – Python, PowerShell, Bash.
• SIEM solutions – Splunk, Google SIEM or equivalents.
• EDR solutions – CrowdStrike Falcon, Microsoft Defender, Sentinel.
• Cloud security – Google Cloud Platform (GCP), AWS, Microsoft Azure.
• Threat intelligence and vulnerability management tools – VirusTotal, Mandiant, MISP.
• Email security platforms, IAM solutions, and other security monitoring technologies.