Act as the Technical Focal Point (TFP) for assigned clients, managing technical communication, incident coordination, and ongoing security alignment.

• Lead end-to-end incident response activities, including triage, investigation, containment, root cause analysis, and remediation recommendations.
• Perform advanced threat detection and investigation using SIEM platforms such as QRadar, Splunk, Elastic, Google SecOps (Chronicle), or Palo Alto XSIAM.
• Operate and tune XDR/EDR solutions (e.g., Cortex XDR, CrowdStrike, Microsoft Defender, SentinelOne, Trend Micro Vision One) to improve detection accuracy and reduce false positives.
• Conduct log analysis, event correlation, and threat hunting activities to identify suspicious behaviors and emerging threats.
• Produce clear and structured technical and executive reports for clients, ensuring transparency and actionable insights.
• Support and mentor junior analysts, contributing to the overall maturity and quality of SOC operations.
• Identify gaps in detection coverage and recommend improvements aligned with frameworks such as MITRE ATT&CK.

Requirements:

Solid experience in SOC operations and incident response within cybersecurity environments.

• Strong understanding of cyber threat landscapes, including attack vectors, kill chain methodologies, malware behavior, and defensive strategies.
• Hands-on experience with at least one SIEM platform, including log analysis and correlation (e.g., QRadar, Splunk, Elastic, Chronicle, XSIAM).
• Experience with XDR/EDR tools such as CrowdStrike Falcon, Microsoft Defender, SentinelOne, Cortex XDR, or equivalent solutions.
• Strong communication skills, with the ability to interact directly with clients in a clear, structured, and professional manner.
• Ability to manage multiple security cases simultaneously while maintaining SLA compliance and operational quality.
• Experience in client-facing or technical focal point roles is highly valued.
• Familiarity with automation, scripting, or AI-assisted security workflows is a plus.
• English and Spanish proficiency are considered strong advantages in multilingual environments.
• Security certifications are highly desirable, including Security+, CySA+, CEH, GCIH, GCIA, SC-200, and vendor-specific SIEM/XDR certifications.

Benefits:

• Competitive compensation aligned with market standards
• Health and dental insurance coverage
• Performance-based bonus programs
• Meal and food allowances
• Access to continuous learning and cybersecurity certifications
• Flexible and collaborative work environment
• Mental health and wellness support programs
• Opportunities to work with global cybersecurity clients and advanced security technologies
• Career development within a highly specialized SOC/MDR structure.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1