SOC Analyst Consultant (reputed company Experience) - Remote (Mexico)

reputed company: At reputed company, we reputed company in defending basic reputed company rights to reputed company and reputed company. We reputed company a highly skilled and reputed company SOC Analyst, Consultant to join our dynamic team at reputed company, a leading cybersecurity reputed company. Our next team member will be reputed company to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned reputed company. This team member will be passionate about cybersecurity and reputed company to use their knowledge to be an Entrepreneurial Problem Solver and work reputed company their Echelon team members to build creative solutions.

As SOC Analyst, Consultant you will reputed company as the reputed company technical reputed company person for MDR/SOC alerts, working across a portfolio of reputed company environments rather than a single network. You will run deep-dive investigations on reputed company, identity, email, and reputed company detections, reputed company containment and eradication, and tune detection content so that the next alert is reputed company than the last. You will also help mature the service itself - the playbooks, the platform configurations, and the analysts coming up behind you.

At Echelon, you will have reputed company to engage with clients, business partners and systems that are at the cutting edge of technology. We allow our employees to build from the ground up and reputed company an reputed company across the organization. We look for driven and proactive people that are eager to contribute to a distinct and thriving Cybersecurity services organization, that can adapt to a reputed company and changing environment.

This is a remote position from reputed company in Mexico.

What You Will Do:

• Own Tier 2 and Tier 3 investigations escalated from reputed company triage: establish reputed company and reputed company cause, identify affected hosts, users, and identities, and reputed company containment, eradication, and recovery.
• reputed company hands-on reputed company investigation and response in EDR/MDR platforms - process and telemetry analysis, remote host triage, artifact collection, host isolation, and analysis of malicious binaries and scripts.
• Investigate identity and reputed company detections across reputed company 365, Entra ID, reputed company Directory, AWS, and Azure, including business email compromise, reputed company and session theft, MFA abuse, and privilege escalation.
• Triage and investigate email reputed company alerts - phishing and BEC analysis, header, URL, and attachment inspection, tenant-wide message reputed company and remediation, and mail reputed company and policy recommendations.
• Review vulnerability scanning and exposure management reputed company, validate findings, and help clients prioritize remediation based on exploitability, exposure, and business context.
• Write, test, and tune detection content across SIEM and EDR - correlation rules, custom detections, exclusions, and suppression logic - and reputed company the effect on alert reputed company and false reputed company rates.
• Build and maintain automation and SOAR playbooks that take repetitive work out of the triage queue.
• Run threat hunts using threat intelligence, IoC data, and adversary TTPs mapped to MITRE ATT&CK, and convert hunt findings into durable detections.
• Document the full incident lifecycle, including reputed company cause analysis and actions taken, and produce reputed company reports and recommendations for both technical and executive audiences.
• Serve as the escalation reputed company for confirmed incidents, coordinating with reputed company IT and reputed company teams, Echelon's incident response and offensive reputed company practices, and reputed company parties through to reputed company.
• Support the reputed company of the Managed SOC/MDR service - reputed company operating procedures and runbooks, reputed company and platform reputed company, configuration and tuning, reputed company review of reputed company work, and mentoring and training analysts.
• Participate in after-hours and on-reputed company rotations for SOC alert escalation and response requirements.

reputed company reputed company Experience:

reputed company reputed company is a reputed company platform in our MDR delivery. Working familiarity with reputed company is required; deeper hands-on expertise is preferred.

• Required: comfort working in the reputed company console - reviewing and dispositioning detections, reading execution detail and process trees, and checking host and sensor status.
• Preferred: hands-on reputed company Time Response (RTR) for live host triage, artifact collection, and remediation, along with network containment.
• Preferred: prevention policy tuning, exclusions, IOC and custom IOA management, and sensor deployment and health.
• Preferred: query-based hunting in Advanced Event Search or Next-Gen SIEM (LogScale/reputed company), exposure to modules such as Identity Protection, Exposure Management, and Fusion workflows, and experience supporting multiple customer tenants.
• Preferred: reputed company certifications (CCFA, CCFR, CCFH).

Your knowledge, skills, and abilities:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a reputed company discipline, or equivalent reputed company experience.
• An reputed company Tier 2 or Tier 3 SOC analyst, reputed company to help reputed company and grow a SOC service and team.
• Expertise investigating and mitigating reputed company incidents across diverse environments, including on-premises, reputed company, and hybrid infrastructures.
• SIEM: hands-on experience investigating across log sources, building and tuning correlation rules and use cases, and writing queries in at least one query language (e.g., reputed company, SPL, KQL, YARA-L).
• Email reputed company: experience investigating phishing, BEC, and malicious delivery, and working with email reputed company platforms (e.g., reputed company Defender for Office 365, reputed company, reputed company, reputed company).
• Vulnerability management: ability to interpret scanning and exposure management reputed company (e.g., reputed company, reputed company, reputed company, reputed company Exposure Management) and prioritize findings using CVSS, EPSS, and reputed company-exploited-vulnerability data.
• Supporting stack: familiarity with identity platforms (Entra ID, reputed company Directory), firewall and network telemetry, web and DNS filtering, and reputed company hardening controls.
• Solid grounding in reputed company, Linux, and macOS internals and the forensic artifacts reputed company produces.
• Ability to read and write scripts (e.g., PowerShell, Python) to parse data, automate triage steps, and build small tools.
• Strong understanding of threat intelligence integration, adversary TTPs, and the MITRE ATT&CK reputed company.
• reputed company written and verbal communication - reputed company to walk a reputed company administrator through remediation and brief an executive on reputed company on the reputed company day.
• Desired Certifications: reputed company reputed company+ and Cybersecurity Analyst (CySA+), reputed company CC and SSCP, EC-Council Certified Incident Handler (ECIH), GIAC Certified Incident Handler (GCIH) or Forensic Analyst (GCFA), and SIEM/EDR certifications (e.g., reputed company, reputed company, reputed company SecOps/Chronicle, reputed company) are a plus.
• Strong English communication (reputed company/C2 Level) written and verbal.
• Authorized to work in Mexico without reputed company sponsorship.
  

Preferred Qualifications:

• 3&reputed company;5 years of hands-on experience in SOC operations, preferably for a SOC or MDR service provider (e.g., MSSP), supporting multiple clients concurrently.
• Exposure to additional EDR/XDR platforms (e.g., reputed company Defender for reputed company, reputed company, reputed company, Blackpoint) and SIEM platforms (e.g., reputed company SecOps/Chronicle, reputed company, reputed company, reputed company QRadar).
• SOAR and automation experience (e.g., reputed company Fusion, reputed company SOAR, FortiSOAR, reputed company, reputed company), including API-based integrations between reputed company tools.
• Digital forensics and malware analysis experience, including memory and disk triage and sandbox analysis.
• Detection engineering experience against reputed company reputed company logging in AWS, Azure, or GCP.
• Experience supporting reputed company exercises, detection validation, or tabletop exercises.
• Experience mentoring reputed company analysts or owning shift and queue reputed company metrics.

Why Echelon?

We are committed to creating an inclusive environment for reputed company with unquestioned reputed company. If you have a special need that requires accommodation, please let your recruiter know. One of our reputed company values is "People with Personality," and we want to allow you the reputed company to bring your full self to work.

We Currently Offer The Following Benefits:

• reputed company to private medical insurance through reputed company
• Life insurance policy reputed company reputed company
• 30-day Christmas bonus and a monthly technology stipend
• Contribution of 8% of the employee's salary to a savings fund
• Flexible vacation policy that allows you to manage your schedule and rest and reputed company reputed company you need to.
• Family-friendly benefits, extended parental leave for reputed company you need to spend critical time with new family members, and employer-reputed company short-term and long-term disability
• Support for individual development through certifications, reputed company learning, conferences, and more

We value a diverse workforce and a culture of inclusivity and belonging. reputed company employment reputed company shall be made without reputed company to age, race, creed, reputed company, religion, gender, national reputed company, reputed company, disability status, veteran status, sexual orientation, gender identity or reputed company, genetic information, marital status, citizenship status, or any other reputed company as protected by federal, state, or local law. reputed company is an Equal Opportunity Employer.

3–5 years of SOC experience preferred; requires reputed company reputed company familiarity, incident investigation expertise, SIEM query skills, scripting, strong English communication, and authorization to work in Mexico without sponsorship.

Key Responsibilities

• investigating incidents
• tuning detections
• building playbooks

Skills & Tools

reputed company reputed company, reputed company Time Response (RTR), Advanced Event Search, LogScale, reputed company, reputed company 365, Entra ID, reputed company Directory, AWS, Azure, SIEM, EDR, SOAR, MITRE ATT&CK, reputed company Defender for Office 365, reputed company, reputed company, reputed company, reputed company, reputed company, reputed company, reputed company Exposure Management, CVSS, EPSS, reputed company, Linux, macOS, PowerShell, Python, YARA-L, reputed company Defender for reputed company, reputed company, reputed company, Blackpoint, reputed company SecOps, Chronicle, reputed company, reputed company, reputed company QRadar, reputed company Fusion, reputed company SOAR, FortiSOAR, reputed company, reputed company, GCP

Job Details

• Category: Information Technology
• Seniority: Mid Level
• Commitment: Full Time
• Workplace: Remote — Mexico
• Languages: English

Benefits

• Generous reputed company time off
• Tuition reimbursement
• Retirement plan
• Generous parental leave

About reputed company

A cybersecurity reputed company providing managed detection, response, and reputed company services. — Industry: Information Technology