Security Monitoring Engineer (Santiago de Querétaro)

Bosal GroupBOSAL is a Dutch privately owned company, mainly known as an integral Tier 1 automotive supplier, in business since ****. We employ about **** people in 16 production facilities, the largest of which are situated in Czechia, Mexico, Turkey, Brazil, the United States, and South Africa. Our corporate research center is based in Belgium, and we operate five other R&D satellites worldwide.

We are currently looking for a Security Monitoring Engineer in Querétaro, Mexico.

Responsibilities

• Design, implement, and operate a SIEM platform (e.g. Microsoft Sentinel or equivalent).
• Onboard and normalize logs from Palo Alto Firewalls and Prisma Access.
• Onboard and normalize logs from Cisco switches, WLCs, ISE, and Catalyst Center.
• Onboard and normalize logs from Windows and Linux servers.
• Onboard and normalize logs from Microsoft 365 and identity services.
• Onboard and normalize logs from critical applications and SaaS platforms.
• Define, prioritize, and maintain detection use cases aligned with asset criticality and risk.
• Develop and maintain detection rules and use cases.
• Design and document incident‑response workflows and playbooks.
• Correlate incidents with asset criticality, vulnerability, and exposure data.
• Support TISAX evidence for monitoring, logging, and incident handling.
• Continuously improve detection coverage and reduce false positives.
• Ensure monitoring and incident‑response capabilities are demonstrably effective and audit‑ready.

Qualifications

• 4+ years in security operations or SOC‑related roles.
• Experience building or extending SIEM platforms.
• Experience in heterogeneous environments (network, servers, cloud).
• Experience with incident‑response processes.
• Relevant certifications considered an asset.
• Strong knowledge of log ingestion and parsing (syslog, APIs).
• Expertise in security monitoring and detection engineering.
• Knowledge of network and firewall logging concepts.
• Experience with Windows and Linux logging.
• Proficiency with SIEM platforms such as Microsoft Sentinel, Splunk, or similar.

Do you have an entrepreneurial mindset and want to invest in your career? Then we offer an inspiring job in a unique environment with a competitive remuneration package and additional benefits.

Apply via the LinkedIn apply button.