We are ktsa – kpmg technology services americas.a service delivery center of kpmg us, with offices in mexico city, guadalajara, and a growing network of remote talent across the country.we deliver high-value technology, consulting, and corporate support services to kpmg us and its clients.at ktsa, our employer value proposition is clear: explore.explore isn't just a word — it's how we grow, lead, and thrive.it's the mindset that drives our culture and shapes every opportunity:experience a collaborative, inclusive, and multicultural workplace where you belong.excel by creating impact and leaving your mark on global projects.expand your potential with real career paths, learning programs, and mentorship.express your individuality — come as you are, and thrive as your authentic self.and because we know that thriving at work also means thriving in life, we back this mindset with ktsamás, our total rewards program, designed to support your well-being, goals, and personal milestones.responsibilities and qualificationskey responsibilitiesutilize your expertise in it security, security operations, and incident response to build, operate, and enhance our extended security orchestration and automation (xsoar) tool, ensuring swift and effective handling of incidents and ongoing protection of organizational assets.handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats.conduct regular assessments to identify vulnerabilities and insecure configurations and review security change requests to ensure robust protective measures.configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms.implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution.leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches.qualificationsbachelor's degree with 2-5 years of experience in cybersecurity operations with experience implementing processes and playbooks in cybersecurity monitoring and incident response activities using xsoar products.experience with scripting or automation with python, and servicenow is a plus.ability to participate in development of resource plans and project estimation.preferred qualificationsrelevant certifications include cissp, ccsp, ccsk, gsec, gcih, gcfe, gcfa, sc-200, ceh, and az-900working hourssunday - wednesday or wednesday to saturday7:00am to 5:00pm or 1pm to 11:00pmbenefitsextended maternity, paternity, and adoption leaveslearning opportunities, training, and certification programsextended marriage leave and daycare supportwellness and employee assistance programs (eap)comprehensive medical plan, life insurance, car insurance, and funeral assistancevisit to learn more.at ktsa, we celebrate and support everyone's individuality.we do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability.we are supportive of helping you to achieve a balance between your home and work demands.we are happy to discuss specific requirements and our range of flexible working arrangements could be of interest.please ask to find out more.we strongly state that we do not require a certificate of non-pregnancy or hiv in order to participate in any of our processes.explore ktsa, we dare to be different!#j-*-ljbffr