Cyber Security Analyst II

Location(s): Mexico City, MX

Job Schedule: Full-Time, Hybrid

Education Requirement: Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field

Sponsorship: No

We’re currently looking for Cyber Security Analyst II, in SOC Monitoring, Threat Response, Incident Response and Threat Hunting to join our team in Mexico City, MX. The Cyber Security Analyst is an advanced and highly trusted role supporting the enterprise cybersecurity program. Additionally, serves across all areas of threat intelligence to help inform and defend the business, and protect brand reputation. The analyst monitors application, host and network threats, including external threat actors and rogue insiders. The analyst understands that systems and applications may have weaknesses that can be exploited by external threat actors and potentially lead to a breach.

As a trusted member of the cybersecurity team and industry community, the analyst works closely with internal technical teams, business units and external entities aligned with the business, including private intelligence-sharing groups, law enforcement, government agencies and public affiliation peers.

The Cyber Security Analyst II is responsible for conducting in-depth research, documenting threats, understanding the risk to the business, and sharing information with those who need to know. Among the research conducted, the analyst will seek to uncover patterns and trends and be forward-thinking as to how threats may evolve. Furthermore, the analyst will participate in simulation exercises designed to uncover weaknesses related to threats, with the goal of implementing defensive solutions prior to attacks and disrupting attacks in progress. The analyst will also distill threat intelligence so technical and non-technical contacts can understand it and make educated decisions about next-step actions. The Cyber Security Analyst works in tandem with Manager and Sr. Manager to elevate the company’s security posture.

A Day in the Life:

• Monitor, investigate, and respond to security events and incidents.

• Conduct threat hunting and threat intelligence analysis.

• Collaborate with internal teams to improve security capabilities.

• Leverage automation tools to improve operational efficiency.

• Participate in incident response exercises and continuous improvement initiatives.

Who We’re Looking for:

Required:

· As an active member of the team, monitor and process response for security events.

· Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).

· Stay current with and remain knowledgeable about new threats. Analyze attacker tactics, techniques and procedures (TTPs) from security events across a large heterogeneous network of security devices and end-user systems.

· Participate in threat modeling collaboration with other members of the security team.

· Leverage automation and orchestration solutions to automate repetitive tasks.

· Assist with incident response as events are escalated, including triage, remediation and documentation.

· Aid in threat and vulnerability research across event data collected by systems.

· Investigate and document events to aid incident responders, managers and other SOC team members on security issues and the emergence of new threats.

· Work alongside other security team members to hunt for and identify security issues generated from the network, including third-party relationships.

· Share information as directed with other team members and ISACs.

· Seek opportunities to drive efficiencies.

· Manage security event investigations, partnering with other departments (e.g., IT) as needed.

· Evaluate SOC policies and procedures, and recommend updates to management as appropriate.

· Adhere to service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events.

· Partner with the security engineering team to improve tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities.

· Leverage knowledge in multiple security disciplines, such as Windows, UNIX, Linux, data loss prevention (DLP), endpoint controls, databases, wireless security and data networking, to offer global solutions for a complex heterogeneous environment.

· Maintain working knowledge of advanced threat detection as the industry evolves.

Desired:

· Experience driving measurable improvement in monitoring and response capabilities at scale.

· Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tools.

· Knowledge of and understanding of networking and internet protocols.

· Knowledge and understanding of Windows and Linux Operating Systems

· Knowledge and understanding of Cloud

· Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

· Working knowledge/experience with network systems, security principles, applications and risk and compliance initiatives such as Gramm-Leach Bliley Act (GLBA), Payment Card Industry (PCI), Health Information Portability and Accountability Ace (HIPAA), Sarbanes-Oxley Act (SOX) and the General Data Protection Regulation (GDPR).

·Utilize scripting and automation techniques (PowerShell, Python, Bash, API integrations) to improve operational efficiency and reduce manual effort.

· Correlate security events across multiple platforms including SIEM, EDR, Email Security, Firewalls, Cloud Platforms, and Network Monitoring solutions

· Independently investigate and respond to cybersecurity alerts and incidents across endpoints, identities, networks, cloud environments, and business applications

Reporting line:

Reports to: Manager IS.

What You’ll Look Forward to at Nissan:

Career Growth and Continuous Learning Opportunities: Benefit from diverse career paths, cross-departmental moves, and innovative learning platforms. Enhance your skills through seminars, leadership training, and tuition reimbursement programs, all while playing a vital role in shaping the future of transportation. From day one, you'll have the support to tackle challenges and contribute to impactful solutions across our organization.

Rewards: Nissan offers a comprehensive benefits package to support the well-being and success of our employees, with offers that may vary by location and role.

Nissan (NMEX,NEdM, NRFS, NRFM and ANZEN) hires based on the fulfillment of the job profile in the vacancy, without distinction or discrimination based on gender, gender identity and/or expression, sexual orientation, race, color, language, religion, political or any other opinion, national or social origin, economic position, birth or any other condition.

By applying for the advertised position, candidates acknowledge that Nissan Mexicana and its subsidiaries reserve the right to conduct a public conduct search due to the sensitive nature of the assets and information involved in the role. This includes, but is not limited to, proprietary information, financial data, and other assets requiring safeguarding. Nissan Mexicana and its subsidiaries assure confidentiality and compliance with all legal requirements regarding the use of such information. By applying for this position, you are consenting to this check.

NISSAN FOR EVERYONE

People are our most valuable assets, and diversity and inclusion are essential to maximizing the power of each team member. Our Corporate Diversity Initiative ensures our workplace meets the unique needs of our employees and customers. We are committed to creating a culture where everyone belongs and feels respected, valued, and heard.

Nissan values inclusion in all areas of our business, striving to mirror the diversity of our customer base and communities. Join us in our commitment to diversity and inclusion.

THIS IS NISSAN:

https://www.youtube.com/watch?v=PXuame0vwiw&list=PLki2k0CDxrPe8V6WmEeEdhj1fosRD-JQa