Key responsibilities- monitor security events received through alerts from siem or other security toolsrevise alerts escalated by end users carry out level 1 triage of incoming issues (initial assessing the priority of the event,initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request)carry out limited incident response to end users for low complexity security incidentsmaintain assigned ticket queueparticipate actively in the resolution of incidents, even after they are escalatedqualifications- technical degree or computing modules1 year of experience in a socproficiency in using security information and event management (siem) solutionsfamiliarity with other security tools, including firewalls, intrusion detection systems (ids), and vulnerability scanners.security essentialscomputer forensic investigation-windows in depthsecurity incident handling and forensics.nice to have - fluent in english and spanish, written and spoken (b2 desired)familiarity with prevalent cyber threats, such as malware, phishing attacks, and ddos attacksgeneral network knowledge, tcp/ip troubleshootingability to trace down an endpoint on the network based on ticket informationfamiliarity with system log information and what it means.this position is in queretaro.