Senior Security Analyst (Cybersecurity)

Location: Guadalajara, Mexico; hybrid role requiring onsite availability in the Guadalajara office as needed. Candidates must be based in Guadalajara.

Company

hirify.global builds an enterprise SaaS platform and a Predictive Revenue System that combines AI, revenue insights, and human decision-making.

What you will do

• Act as the escalation point for complex security alerts across SIEM, EDR/XDR, cloud monitoring, endpoint, identity, network, and cloud telemetry.
• Lead medium-severity incident response and support critical-event response, including containment, eradication, recovery, post-incident reviews, and corrective actions.
• Develop, test, and tune MITRE ATT&CK-mapped detection rules and use cases while reducing false positives and closing visibility gaps.
• Build playbooks, runbooks, and SOAR automations; define and report SOC metrics such as MTTD, MTTR, and alert quality.
• Prioritize vulnerabilities by exploitability and business impact, coordinate remediation with IT and Engineering, and handle access reviews, phishing investigations, software security assessments, and security inquiries.
• Support phishing simulations, security awareness, documentation, onboarding, and coaching for junior analysts.

Requirements

• 5–7 years of experience in Information Security, Security Operations, Incident Response, Detection Engineering, or a related technical analysis role within a SaaS or cloud-native environment.
• Demonstrated experience leading complex incident investigations end to end, including scoping, containment, root-cause analysis, and post-incident reporting.
• Deep expertise in endpoint protection, identity and access management, network security, cloud security, and email security or phishing analysis.
• Advanced hands-on experience with SIEM platforms and EDR tools, including CrowdStrike or SentinelOne, query writing, and detection logic using SPL, KQL, SQL, or similar.
• Strong knowledge of common attack vectors, OWASP Top 10 web vulnerabilities, and advanced incident response procedures.
• Strong analytical and problem-solving skills with high attention to detail when investigating logs and anomalous activity.
• Proficiency in scripting or automation with Python, PowerShell, or Bash, plus experience with SOAR or workflow automation.
• Ability to mentor and coach less experienced analysts.
• Excellent written and verbal communication skills for explaining technical issues to technical and non-technical stakeholders.
• Collaborative mentality focused on team outcomes.

Nice to have

• Relevant industry certifications such as CompTIA Security+, CySA+, GSEC, or GIAC.

Culture & Benefits

• Hybrid work arrangement with required onsite availability in Guadalajara.
• Collaborative Security Operations team focused on threat detection, continuous learning, and customer trust.
• Culture emphasizes inclusion, supportive collaboration, and culture add rather than culture fit.
• Opportunity to shape the security operations program for an enterprise SaaS platform used by global organizations.