L2/L3 SOC Analyst/Incident Handler - LT Contract - Remote in Mexico City Area

Location: Mexico (Remote/Hybrid depending on candidate location)
Contract: 1-year (with possibility of extension)
Compensation: Hourly rate based on skills, experience, location, and English proficiency

About Nearshore Cyber

Nearshore Cyber, S.A. de C.V. is a niche cybersecurity staffing and recruiting agency specializing in connecting top-tier cybersecurity talent with global organizations.

We are hiring three (3) L2/L3 SOC Analysts for our US-based client. These professionals will support enterprise cybersecurity operations, incident response, and security administration.

Key Responsibilities

Incident Handling & Response:

• Triage and validate security incidents reported by the Managed Security Services Provider (MSSP) and Microsoft Security Center
• Investigate incidents to determine root cause and potential impact
• Escalate and/or initiate remediation actions
• Provide local support for MSSP-led incident response efforts

Cybersecurity Operations & Maintenance:

• Perform administration, maintenance, and support of enterprise security platforms, including:
  • Privileged Identity Management (PIM)
  • Email Security Solutions
  • Microsoft Defender
  • KnowBe4 Security Awareness Platform

Documentation & Process Management:

• Maintain and update security documentation such as:
  • Runbooks and standard operating procedures
  • Incident response plans

Requirements

️ 3+ years of experience in Security Operations Center (SOC) roles (L2/L3 level)
️ Strong experience with Microsoft Security technologies, including:

• Microsoft Defender
• Privileged Identity Management (PIM)
• Email Security Solutions
• Security monitoring, incident response, and threat investigation expertise
• Familiarity with security frameworks (NIST, MITRE ATT&CK, etc.)
• Ability to analyze security logs, alerts, and events
• Strong problem-solving skills and ability to work under pressure
• Strong oral and written English language skills
• SANS GCIH, OSCP, or similar demonstrable experience strongly preferred

Why Join Us?

Competitive hourly rate (based on experience, location, and English skills)
Opportunity to work with a leading US-based cybersecurity team
Exposure to cutting-edge security technologies and best practices
Potential for contract extension and career growth