SOC Analyst (Senior Level)

About the company T-Systems Mexico, part of Deutsche Telekom, is a global leader in IT services and digital transformation. The company supports large organizations with end-to-end technological solutions, operating in complex, international and high-impact environments. Its teams drive innovation, operational excellence and continuous improvement in all areas of the business.

Description of the position We are looking for a SOC Analyst (Senior Level) to lead the investigation, analysis and response to complex security incidents within the Security Operations Center. This role requires strong technical expertise and strategic capabilities to strengthen detection, response and prevention capabilities, as well as to lead continuous improvement initiatives and support team development.

Main Responsibilities

• Lead the investigation and validation of critical and complex alerts scaled from lower levels

• Perform advanced event correlation on SIEM/XDR platforms (Splunk, CrowdStrike, Cortex XDR, Microsoft Defender, Azure)

• Perform advanced threat hunting and proactive threat investigations

• Coordinate response to high-impact security incidents, including deep forensic analysis

• Managing communication with stakeholders, IT teams and vendors during critical incidents

• Monitor and improve detection rules, use cases and response playbooks

• Ensure complete and accurate documentation of incidents, lessons learned and executive reports

• Lead and participate in simulation exercises (tabletop, purple team)

• Provide mentoring, technical guidance and training to Level 1 and Level 2 analysts

• Promote continuous improvement of SOC processes, tools and capabilities

Requirements

• Degree in Cybersecurity, Systems, Information Technology or related area

• Strong experience in SOC or cybersecurity (senior level)

• SIEM/XDR tool domain (Splunk, CrowdStrike, Cortex XDR, Defender, Azure)

• Extensive experience in incident response, threat analysis and event correlation

• Advanced knowledge of forensic analysis, threat hunting and detection techniques

• Experience with cybersecurity frameworks (MITRE ATT&CK, NIST, ISO 27001)

• Knowledge of ITIL processes (incident, problem and change management)

• Intermediate-advanced English

Skills and Competencies

• Technical leadership and decision-making in critical situations

• High analytical thinking and focus on solving complex problems

• Excellent communication with technical and executive profiles

• Ability to work under pressure in highly critical environments

• Proactivity and initiative to improve processes and tools

• Ability to mentor and develop talent

Desirable

• Cybersecurity certifications (CISSP, GCIA, GCIH, CySA+, CEH or others)

• Experience in complex global or corporate environments

• Experience in security automation and use of SOAR

• Threat Intelligence knowledge

T-Systems is proud to be an equal opportunity and affirmative action employer. We do not discriminate on the basis of race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a person with a disability, or other applicable legally protected characteristics. Thus, in any evaluation or hiring process within T-Systems Mexico, no HIV or pregnancy tests are required.

It is also important to mention that T-Systems has an anti-bribery management system and it is the commitment of all employees to know and comply with it.

We also believe that change brings new opportunities for development and innovation. People who are ready to perform at their best under such conditions will excel and create something new. Precisely for this reason, we provide our employees with unique opportunities for further development, whether in technical or managerial careers.