SOC Analyst

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Manage initial triage, oversight, and investigation of security alerts across cloud and endpoint environments.

• Supervise security alerts generated from SIEM, EDR, and various cloud platforms.

• Conduct initial triage and categorize alerts as either true or false positives.

• Examine suspicious activities across endpoints, identities, and cloud settings.

• Forward confirmed incidents to Tier 2 / Incident Response teams with comprehensive context.

• Analyze logs from CloudTrail, Azure Activity Logs, OS logs, and other pertinent security data sources.

• Clearly document findings in tickets and investigation reports.

• Adhere to existing playbooks while contributing to the enhancement of detection logic over time.

• Liaise with internal teams and clients regarding alerts, findings, and escalations.

⛳️ Requirements

• Over 1 year of experience in SOC / Security Operations.

• Practical experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint.

• Familiarity with SIEM platforms like Splunk, Microsoft Sentinel, QRadar, or similar alternatives.

• Understanding of fundamental networking concepts, including IP, DNS, HTTP/S, ports, and related topics.

• Basic knowledge of Linux and Windows operating systems.

• Capability to analyze logs and detect suspicious behavior.

• Proficient in English, both written and spoken — mandatory.

• Exceptional verbal communication skills, especially in client-facing situations.

• Experience with cloud environments such as AWS, Azure, or GCP.

• Knowledge of GCP / Google Cloud Platform — significant advantage.

• Proficient in investigating cloud activity, including IAM, API calls, and resource modifications.

• Understanding of identity-based attacks, such as token abuse and privilege escalation.

• Experience with scripting in Python or Bash.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and career growth.

• Flexible working hours and remote work options.

• A collaborative and inclusive company culture.