Intermediate Level SOC Analyst (Cybersecurity)

Location: Mexico, Mexico; onsite role

Company

T-Systems Mexico, part of Deutsche Telekom, provides IT services and digital transformation solutions for large organizations in complex international environments.

What you will do

• Investigate and validate alerts escalated from Level 1.
• Correlate events across SIEM/XDR platforms including Splunk, CrowdStrike, Cortex XDR, Microsoft Defender, and Azure.
• Perform basic threat hunting and initial forensic analysis.
• Track tickets with vendors and coordinate incident response with IT teams.
• Document security incidents, recommend mitigations, and support improvements to detection rules and response playbooks.
• Mentor and train Level 1 analysts.

Requirements

• 2–4 years of experience in security operations or systems administration.
• Previous experience with SIEM/XDR monitoring and incident response.
• Strong knowledge of networks, protocols, and Windows, Linux, and macOS operating systems.
• Experience managing security consoles such as CrowdStrike, Microsoft Defender, Cortex XDR, Splunk, and SocRadar.
• Experience managing security-tool queries using FQL, KQL, XQL, or similar languages.
• Critical-analysis and event-contextualization skills.
• Ability to use basic Python and PowerShell scripts for automation.
• Intermediate-to-advanced technical English is required for documentation and vendor communication.
• Experience with ticket management and supplier coordination.

Nice to have

• Participation in threat hunting projects, malware analysis, or basic forensic analysis.

Culture & Benefits

• Equal opportunity and affirmative action employer.
• No discrimination based on legally protected characteristics; HIV or pregnancy tests are not required during evaluation or hiring.
• Employees are expected to comply with the anti-bribery management system.
• Opportunities for further development through technical and managerial career paths.