Want to know if this job is worth applying to?
México
Remote only
WHAT YOU'LL DO
Investigate incoming EDR/XDR incidents, focusing on accurate triage and severity assessment
Execute remediation actions such as workload isolation, following established playbooks
Document investigation steps and maintain complete case records
Collaborate with AI engineering to test and refine automated triage and response processes
Own the incident from the detection to the resolution, with assistance from senior staff if required
Support development and refinement of documentation, automation, and incident correlation logic
Communicate clearly with customers via email and phone about incident status and recommendations
Stay informed about current security threats and attacker techniques
Work 5-day/8-hour schedule in office hours, with rotational weekend coverage
WHO WE’RE LOOKING FOR
Experience in SOC, MDR, or IT security operations
Strong understanding of EDR/XDR operations and security incident workflows
Strong understanding of common attacker's TTPs and MITRE ATT&CK framework
Knowledge of Windows OS, Active Directory, Linux, Networking
Familiar with logs analysis in tools like Kibana or manual reviews.
Experience working with security tools (EDR, SIEM, SOAR) and interest in automation technologies
Ability to follow structured processes and accurately document findings
Growth mindset
Strong communication skills and attention to details
Solid English written and verbal communication skills (B2 or higher)
*Please submit your resume and application in English
WHO WE ARE
A Swiss company founded in Singapore in 2003, Acronis offers over twenty years of innovation with 15 offices worldwide and employees in 50+ countries. Acronis Cyber Protect is available in 26 languages in 150 countries and is used by over 21,000 service providers to protect more than 750,000 businesses.
Our corporate culture centers on innovation, accountability, and impact. We encourage our people to think boldly, challenge conventional approaches, and take ownership of outcomes. As a member of our global “A-Team,” you’ll operate in a high-growth, fast-paced environment where resilience, adaptability, and a commitment to continuous improvement drive success.
OUR INTERVIEW PRACTICES
To ensure a fair and genuine hiring process, candidates are expected to participate in interviews without the use of AI tools, automated prompts, or third-party assistance. Interviews are designed to assess individual skills, experience, and communication style, and we value authentic, real-time interaction.
Use of AI or external assistance during live interviews may result in disqualification. For roles where AI skills are being evaluated, permitted use of AI tools will be clearly communicated in advance. Candidates may be asked to disable virtual backgrounds or participate in in-person interviews. All employment offers are contingent upon successful completion of applicable criminal, education and identity background checks
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
