This is a challenging and impactful role with the opportunity to work with both internal and external stakeholders. The candidate must be able to balance the right level of security with business objectives, communicate clearly with technical as well as non-technical audiences, and work to creatively solve complex problems.
This role reports to the Senior Director of Enterprise Security, is based in the Mexico City, MX, and is hybrid with 3 days in-office.
What you´ll do
Lead the effort to redefine and mature Delinea’s Security Operations function. Provide technical expertise and shape the procedural and programmatic structure of our monitoring, detection, and incident response capabilities.
Lead a team of security analysts, setting expectations on performance, goals, and objectives, and providing mentorship and guidance to team members.
Own the analyst coverage model, including on-call rotation, escalation paths, and staffing plans to sustain monitoring coverage as the program scales.
Own the relationship with Delinea’s MSSP, including vendor management, SLA and performance oversight, escalation paths, and continuous improvement of alert quality and coverage.
Own Delinea’s Security Incident Response program, including leading the response lifecycle from triage through post-incident review, and driving continuous improvement of detection content, alert tuning, and playbooks across SIEM, EDR, and cloud telemetry.
Act as a subject matter expert on security operations best practices, techniques, and procedures.
Build relationships across organizational boundaries to ensure that identified weaknesses are remediated and lessons learned are captured.
Ensure that the Security Operations program meets Delinea’s compliance and customer commitments, such as SOC 2, ISO 27001, PCI DSS, and FedRAMP, and act as the security operations point of contact for auditors and assessors.
Communicate effectively with stakeholders at all levels, translating technical findings into actionable insights and recommendations for both technical and non-technical audiences.
Work with Cybersecurity Program Management to define the metrics that measure program effectiveness, including detection coverage, mean time to detect and respond, alert quality, and time to remediate, and report on them to executive leadership on a regular cadence.
What you´ll need
Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent practical experience.
8+ years of demonstrated, hands-on security experience across threat detection, incident response, and reporting to technical and executive audiences, with 4+ years of that time building and leading security operations teams and developing junior talent.
Experience with vulnerability identification, malware analysis, threat hunting, threat intel and current and emerging exploitation techniques[ZW2] .
Experience detecting and investigating attacks against identity infrastructure and privileged access paths, including Active Directory, Entra ID, Kerberos abuse, and credential and secrets exposure.
Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for tooling, automation, and detection engineering.
Experience with Azure and AWS cloud-based infrastructure.
Hands-on experience with SIEM, EDR, and SOAR platforms, including building and tuning detection content and automating response workflows.
Experience managing a managed security service provider or comparable outsourced monitoring function, including SLA and quality oversight.
Strong verbal and written communication, analytical and people skills.
Fluent in English (spoken and written)
One or more of the following certifications: CISSP, GCIA, GCIH, GCFA, GSOC, or equivalent.
Experience with the Microsoft tech stack (Sentinel, Defender, etc.)
Experience operating a 24x7 or follow-the-sun monitoring model, including on-call rotation design and shift coverage planning.
Experience using AI and LLM-based agents and tooling in a Security Operations context to enhance SOC reporting, alerting, and investigative capabilities.
Why work at Delinea?
We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
We invest in people who are smart, self-motivated, and collaborative.
What we offer in return is meaningful work, a culture of innovation and great career progression.
At Delinea, our core values are STRONG and guide our behaviors and success:
Spirited - We bring energy and passion to everything we do
Trust - We act with integrity and deliver on our commitments
Respect - We listen, value different perspectives, and work as one team
Ownership - We take initiative and follow through
Nimble - We adapt quickly in a fast-changing environment
Global - We embrace diverse people and ideas to drive better outcomes
We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.
We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.
Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.
