Security Operations Engineer

About the role

The Security Operations Engineer will be the first line of defense for a globally distributed developer platform. Based in Mexico, you will triage security alerts, handle sensitive customer security requests, and support internal IT and identity operations across multiple time zones.

Key responsibilities

• Act as the initial responder for security alerts, triaging threat monitoring outputs and vulnerability advisories.
• Handle customer‑facing security cases such as account recovery, authentication issues, ownership verification, and access disputes.
• Participate in on‑call incident‑response rotations, following established playbooks and escalation procedures.
• Maintain and improve operational documentation, including runbooks, decision trees, and support macros.
• Process internal IT and identity management requests (SSO, access provisioning, device support).
• Communicate accurately with customers, engineers, and internal teams during time‑critical incidents.
• Identify recurring issues and contribute to automation and workflow optimization.

Required profile

• Experience in technical support, IT helpdesk, SOC analysis, trust & safety, fraud operations, or similar triage‑heavy environments.
• Basic understanding of authentication, MFA, access control, identity verification, and session management.
• Ability to work asynchronously across global time zones with strong written communication.
• Analytical mindset with a focus on process improvement and documentation.

Required skills

• Command‑line tools
• Log, script, and structured data interpretation
• SSO and identity providers (e.g., Okta)
• Google Workspace
• Multi‑factor authentication (MFA)
• Basic AWS familiarity