L2/L3 SOC Analyst
Location: Mexico (Remote/Hybrid depending on candidate location)
Contract: 1-year (with possibility of extension)
Compensation: Hourly rate based on skills, experience, location, and English proficiency
About Nearshore Cyber
Nearshore Cyber, S.A. de C.V. is a niche cybersecurity staffing and recruiting agency specializing in connecting top-tier cybersecurity talent with global organizations.
We are hiring three (3) L2/L3 SOC Analysts for our US-based client. These professionals will support enterprise cybersecurity operations, incident response, and security administration.
Key Responsibilities
Incident Handling & Response:
- Triage and validate security incidents reported by the Managed Security Services Provider (MSSP) and Microsoft Security Center
- Investigate incidents to determine root cause and potential impact
- Escalate and/or initiate remediation actions
- Provide local support for MSSP-led incident response efforts
Cybersecurity Operations & Maintenance:
- Perform administration, maintenance, and support of enterprise security platforms, including:
- Privileged Identity Management (PIM)
- Email Security Solutions
- Microsoft Defender
- KnowBe4 Security Awareness Platform
Documentation & Process Management:
- Maintain and update security documentation such as:
- Runbooks and standard operating procedures
- Incident response plans
Requirements
️ 3+ years of experience in Security Operations Center (SOC) roles (L2/L3 level)
️ Strong experience with Microsoft Security technologies, including:
- Microsoft Defender
- Privileged Identity Management (PIM)
- Email Security Solutions
- Security monitoring, incident response, and threat investigation expertise
- Familiarity with security frameworks (NIST, MITRE ATT&CK, etc.)
- Ability to analyze security logs, alerts, and events
- Strong problem-solving skills and ability to work under pressure
- Strong oral and written English language skills
- SANS GCIH, OSCP, or similar demonstrable experience strongly preferred
Why Join Us?
Competitive hourly rate (based on experience, location, and English skills)
Opportunity to work with a leading US-based cybersecurity team
Exposure to cutting-edge security technologies and best practices
Potential for contract extension and career growth