Security Incident Associate

hace 6 meses

México Kueski A tiempo completo

**About Kueski**

Founded in 2012 with the mission to improve the financial lives of people in Mexico, Kueski has grown to be one of the largest buy now, pay later (BNPL) and online consumer lending companies in Latin America. Kueski provides financial services to consumers and connects the Mexican economy through its innovative product ecosystem. This ecosystem consists of Kueski Pay, the company's BNPL product available online and in-store, and Kueski Personal Loans, a direct to consumer loan product.

The company is frequently recognized for its strong, diverse and inclusive company culture. In 2022, Kueski has been named one of the most ethical companies in Mexico by AMITAI, and one of the best companies for both young professionals and female talent in Mexico by EFY. The company has also been named to CB Insights’ Fintech 250 list.

**Purpose**

The Security Incident Associate is part of the Information Security team and is responsible for ensuring that all security incidents are handled appropriately and in a timely fashion, in accordance with the existing process and guidelines. The Security Incident Associate is also responsible for ensuring the correct performance and relationship with the SOC/SIEM provider, to ensure they are operating optimally, but also improving their searches as well as building the adequate threat intelligence and threat hunting.

**Key Responsabilities**:

- Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation
- Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation
- Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs)
- Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise
- Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack
- Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity
- Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)
- Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave
- Provides cybersecurity recommendations based on significant threats and vulnerabilities
- Work with stakeholders to resolve computer security incidents and vulnerability compliance
- Identify threat tactics, and methodologies
- Provide timely notice of imminent or hostile intentions or activities which may impact organization objectives, resources, or capabilities.

**Position Requierements**:

- +2 years of relevant experience in incident handling, preferably as part of a SOC (Security Operations Center)
- Experience handling sensitive information
- Experience with SIEM and correlation of events
- Advanced English level
- Preferably knowledge of YARA rules and YAML
- Knowledge of incident response and handling methodologies
- Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions
- Knowledge of cyber defense and vulnerability assessment tools and their capabilities
- Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)
- Knowledge of network traffic analysis methods
- Knowledge of Insider Threat investigations, reporting, investigative tools, and laws/regulations
- Knowledge of adversarial tactics, techniques, and procedures

**You’ll love working at Kueski because**:

- We have a mission-driven culture focused on customer value, teamwork, humility, and integrity.
- Everyone is expected to have role clarity, career growth, and a personal development plan. Feedback and recognition is embedded in our company processes, systems, and practices.
- We ensure competitive salary, medical insurance, and wellbeing through ample and flexible time off as well as mental healthcare benefits. Everyone is an owner and eligible for competitive stock options with a company poised for success.
- We´re committed to building an inclusive and diverse team and we know this leads to incredible work.

Kueski: Where talent excellence improves Mexican lives

LifeAtKueski #KueskiTalent

  • Cyber Security Associate

    hace 1 mes

    Ciudad de México, Ciudad de México Kellanova A tiempo completo

    **IT Security Role Overview**At Kellanova, we are seeking a highly skilled Cyber Security Associate to join our IT Security team. This role is a critical part of our organization's security operations, responsible for participating in the execution of projects set by the architecture team.**Key Responsibilities:**Assist in the implementation of solutions for...

  • Associate Professional, Information Security

    hace 6 meses

    Ciudad de México Ingram Micro A tiempo completo

    It's fun to work in a company where people truly BELIEVE in what they're doing! **Job Description**: Join the business behind the world’s technology brands. You’ll be providing leading-edge IT solutions whilst enjoying the benefits of an ethical, multinational corporation— building us a brighter tomorrow. Be part of our tomorrow as an Information...

  • Security Analyst, Incident Response Specialist

    hace 2 meses

    Ciudad de México, Ciudad de México Lyft A tiempo completo

    At Lyft, our mission is to revolutionize transportation and improve people's lives. To achieve this, we need a talented team of security professionals who can help us protect our systems and data from cyber threats.The Incident Response team is responsible for identifying, containing, and eradicating security incidents that could impact our organization. As...

  • IT Cyber Security Associate

    hace 6 meses

    México Kellanova A tiempo completo

    If you’re ready to bring the best, come join the IT team as a IT Security Associate for Mexico. You’ll be responsible for participating in the execution of projects set by architecture team. You´ll be responsible for participating in assuring proper testing, implementation, maintenance, and optimization of the security technology and operations, in...

  • Incident Response Lead

    hace 2 semanas

    Ciudad de México, Ciudad de México Thomson Reuters A tiempo completo

    About the RoleWe are seeking a highly skilled Incident Response Lead to join our Corporate Global Cyber Security team at Thomson Reuters.In this challenging and rewarding role, you will lead the coordination of tactical incident management activities and drive the execution of maturity activities, such as improvements to cross-functional security incident...

  • Proteger y Servir con Concord Security

    hace 2 semanas

    Ciudad de México, Ciudad de México Concord Security A tiempo completo

    **Sobre nosotros**Nosotros somos Concord Defense, un equipo de seguridad comprometido con brindar protección y servicios de alta calidad a nuestros clientes.**Salario:** $8,000 - $9,500 al mesEstamos buscando a personas calificadas y motivadas para unirse a nuestro equipo como Guardia de Seguridad.Descripción del trabajo:Nuestros Guardias de Seguridad son...

  • Incident Manager

    hace 6 meses

    Ciudad de México RED AMIGO DAL S.A.P.I. of C.V. S.O.F.O.M. E.N.R A tiempo completo

    About Konfío Konfío is at the forefront of transforming the fintech and banking landscape, leveraging technology to empower businesses with innovative financial solutions. As we embark on significant technological transformations to enhance our capabilities and services, we are seeking an experienced Incident Manager to lead the Incident Management...

  • Sr Security Specialist

    hace 2 meses

    Ciudad de México Logicalis A tiempo completo

    Experiência en el diseño e implementación de políticas de seguridad. Conocimiento profundo de criptografía, análisis de vulnerabilidades y gestión de incidentes de seguridad. Competencia en la configuración de firewalls (Fortinet, Cisco, PaloAlto, etc), sistemas de detección de intrusiones y sistemas de prevención de pérdida de datos. Experiência...

  • Líder Respuesta a Incidentes/ Information Security

    hace 2 semanas

    Ciudad de México Santander A tiempo completo

    Líder Respuesta a Incidentes/ Information Security Country: Mexico - Gestiona los roadmaps para implementar nuevas funciones para la plataforma empresarial. - Los autores y las unidades presentan especificaciones con el equipo de ingeniería dedicado. - Define el recorrido del cliente y la experiência del usuario y se asocia con nuestro personal creativo...

  • Security Operator

    hace 6 meses

    México Schweitzer Engineering Laboratories A tiempo completo

    Essential Duties and Responsibilities_ 1. Provide exceptional customer service while observing SEL security policies and culture. 2. Create and maintain security documentation as required, and perform compliance audits. 3. Monitor alarms, assess the security implication of incidents, and respond appropriately. 4. Operate complex security systems with...

  • Incident Response Engineer

    hace 6 meses

    Ciudad de México albo A tiempo completo

    albo albo is a leading fintech company offering financial products to individuals and SMB’s with the mission to bring financial freedom to everyone everywhere. We are looking for an Incident Response Engineer who has experience in the implementation, maintenance and compliance of various security standards and/or frameworks, as well as experience in the...

  • Security Analyst

    hace 3 semanas

    Ciudad de México, CDMX Encora A tiempo completo

    **Important Information** Experience: +6 years Job Mode: Full-time Work Mode: Work from home **Job Summary** **Responsibilities and Duties** - Review and analyze security alerts generated by the SIEM system, prioritizingand triagingalerts based on severity and potential impact - Manage and optimize security operation technologies and functions such as...

  • Engineering Manager, Incident Response

    hace 3 meses

    Ciudad de México, CDMX Lyft A tiempo completo

    At Lyft, our mission is to improve people's lives with the world's best transportation. To do this, we start with our own community by creating an open, inclusive, and diverse organization. Security Incident Response quickly responds to and investigates security alerts and threats affecting Lyft services and infrastructure. You will lead a team that is...

  • Cybersecurity Incident Response Specialist

    hace 1 mes

    Ciudad de México, Ciudad de México Thomson Reuters A tiempo completo

    About the RoleIn this exciting opportunity, you will play a key role in supporting the Incident Response team at Thomson Reuters. You will be responsible for coordinating incident management activities, engaging with cross-functional partners, and managing incident collateral. Your expertise in security operations and threat analysis will be invaluable in...

  • Chief Security Automation Engineer

    hace 4 semanas

    Ciudad de México, Ciudad de México AmorServ A tiempo completo

    We are AmorServ, a forward-thinking organization that is revolutionizing the way we approach software development and security.As a Chief Security Automation Engineer at AmorServ, you will play a pivotal role in ensuring the integrity of our systems and applications by designing, implementing, and managing CI/CD pipelines with a strong focus on security.The...

  • Incident Response Analyst

    hace 6 meses

    México Worldwide Clinical Trials A tiempo completo

    **Requisition Number**7901** **Employment Type**:Regular** **Who we are** Worldwide Clinical Trials (Worldwide), a leading global contract research organization (CRO), works in partnership with biotechnology and pharmaceutical companies to create customized solutions that advance new medications - from discovery to reality. Anchored in our company’s...

  • Cloud Security Architect

    hace 4 semanas

    Ciudad de México, Ciudad de México AmorServ A tiempo completo

    Job DescriptionWe are seeking a highly skilled Cloud Security Architect to join our team at AmorServ. This is a unique opportunity for an experienced professional to lead the design, implementation, and management of CI/CD pipelines with a focus on security.Responsibilities:Cross-functional Collaboration: Work closely with development, QA, and IT teams to...

  • Cybersecurity Threat Hunter and Incident Responder

    hace 4 semanas

    Ciudad de México, Ciudad de México Lyft A tiempo completo

    At Lyft, our mission is to revolutionize the way people move around their communities. We're looking for a skilled Cybersecurity Threat Hunter and Incident Responder to join our team.We connect people to transportation, and we're committed to keeping their personal information and travel details safe. Our security team leads efforts across the company to...

  • Senior Cloud Security Engineer

    hace 3 semanas

    Ciudad de México, Ciudad de México AmorServ A tiempo completo

    Job DescriptionWe are seeking a Senior Cloud Security Engineer to join our team at AmorServ.This role will be responsible for designing, implementing, and managing CI/CD pipelines with a focus on security at every stage. The ideal candidate will have experience with security tools and practices, as well as strong analytical and problem-solving...

  • Cybersecurity Incident Response Lead

    hace 4 semanas

    Ciudad de México, Ciudad de México Thomson Reuters A tiempo completo

    About the RoleWe are seeking an experienced Cybersecurity Incident Response Lead to join our Corporate Global Cyber Security team. In this challenging and rewarding role, you will lead the coordination of tactical incident management activities and drive the execution of the function's maturity activities.As a key member of our 24x7 global incident response...