Mid Security Engineer

About this role

<p></p> <div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol"><strong>Job Title:</strong> Mid Security Engineer<br><strong>Key Skills:</strong> Cloud Security, AWS, SIEM, CrowdStrike, Incident Response, Docker, Kubernetes, IDS/IPS<br><strong>Experience:</strong> +3 years<br><strong>Location:</strong> Hermosillo, Mexico<br><strong>Mode:</strong>&nbsp;Onsite</div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol">We at Coforge are hiring a <strong>Mid Security Engineer (#21341)</strong> to join our team onsite in Hermosillo, Mexico. This role is ideal for a cybersecurity professional with hands-on experience in <strong>cloud security, security operations, and incident response</strong>, and a strong interest in growing within modern SecOps and AI-driven security environments.</div> </div> <div>&nbsp;</div> <div><strong>Key Responsibilities</strong> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Support and enhance <strong>security operations (SecOps)</strong> in cloud and enterprise environments</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Monitor, analyze, and respond to security alerts using <strong>SIEM, EDR, and IDS/IPS tools</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Work with <strong>AWS cloud environments</strong>, ensuring adherence to security best practices</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Investigate and support <strong>incident response and threat analysis</strong> activities</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Perform <strong>log analysis</strong> and correlate events to identify potential threats</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Contribute to <strong>vulnerability management processes</strong>, including identification, prioritization, and remediation tracking</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Collaborate with cross-functional teams to improve overall security posture</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Support containerized environments using <strong>Docker and Kubernetes</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Use basic scripting (<strong>Python or Bash</strong>) to automate tasks and improve efficiency</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Document findings, processes, and remediation actions clearly (Confluence/Jira)</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Proactively identify risks and recommend improvements to security controls and processes</li> </ul> <strong>Required Skills &amp; Qualifications</strong> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">3–5 years of experience in <strong>Security Operations, Cloud Security, or Cybersecurity roles</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Hands-on experience with: <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf"><strong>AWS cloud platforms</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf"><strong>CrowdStrike Falcon</strong> or similar EDR solutions</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf"><strong>SIEM tools and log analysis</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf"><strong>IDS/IPS technologies</strong></li> </ul> </li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Basic understanding of <strong>cloud security principles and best practices</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Familiarity with <strong>Docker and Kubernetes</strong> environments</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience supporting <strong>incident response and security investigations</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Knowledge of <strong>vulnerability management processes</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Basic scripting skills (<strong>Python or Bash preferred</strong>)</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Strong analytical, troubleshooting, and problem-solving abilities</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Good communication and collaboration skills</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to work <strong>onsite in Hermosillo, Mexico</strong></li> </ul> <strong>Preferred Skills</strong> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf"><strong>CrowdStrike Falcon Complete (Administrator) Certification</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Advanced certifications such as <strong>CISSP, CEH, or AWS Certified Security – Specialty</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience with <strong>DevSecOps practices</strong>, including automation and shift-left security</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Hands-on experience with <strong>Infrastructure as Code</strong> tools (Terraform, Ansible, Chef)</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience building <strong>security roadmaps and strategies</strong></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to translate technical risks and incidents for <strong>non-technical stakeholders (including C-level)</strong></li> </ul> <strong>Tools &amp; Technologies</strong> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">AWS Cloud Platform</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">CrowdStrike Falcon Complete (Cloud Security &amp; Endpoint Protection)</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">SIEM Solutions</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Vulnerability Scanners &amp; IDS</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Abnormal (Email Security)</li> <li class="___ccc16d0 fje8fi8 f1ng9