NXP
SOC L3 Analyst
Guadalajara · Work style not stated · Full time
Posted over 6 months ago: check it’s still open
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerNXP
- LocationGuadalajara
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
Role Summary:
The EMEA Regional SOC Analyst at NXP will be tasked with assisting in our day-to-day defensive information security operations, ensuring the security of IT, Operational Technology (OT), and R&D environments. This role is responsible for maintaining threat detection, incident response, and exposure management.
As an EMEA Regional SOC Analyst, you will develop and implement security strategies to protect against evolving cyber threats across diverse environments. You will collaborate with security architects, red teams, product teams, and engineering groups to strengthen our organization’s overall security posture. This role is pivotal leader for our regional security operations center team members, to ensure the continuity of information security operations.
The ideal candidate will be passionate about information security operations center, incident response, and leading a diverse team of global operators. The ideal candidate also has a foundational knowledge and experience in working in an Operational Technology (OT) manufacturing environments.
Show full description
Your opportunity:
NXP is a global player in Semiconductor industry, and security is an essential and integral part of our business. Security Operations & Threat Defense
Job Responsibility:
Operational Mentality and Vision:
- Collaborate with a regional team of cybersecurity professionals focused on threat detection, monitoring, and incident response for IT, OT, and R&D environments.
- Propose and enhance Security Operations Center (SOC) processes, including playbooks, automation, and alert triage.
Incident Response
- Provide SOC Tier 3 Incident response capabilities and coordinate regional cyber incident response efforts, ensuring timely containment, eradication, and recovery.
OT & R&D Security Strategy:
- Limited experience in security controls and frameworks tailored for ICS/SCADA, industrial IoT (IIoT), and embedded systems in OT environments.
- Ability to work closely with regional engineering and R&D teams to integrate security into product development lifecycles.
- Ensure compliance with industry regulations and frameworks such as NIST CSF, IEC 62443, and MITRE ATT&CK for ICS.
Vulnerability Management & Hardening
- Oversee regional vulnerability assessments and risk management programs across IT, OT, and R&D.
- Guide patch management and compensating controls for systems where direct patching is not feasible.
- Work with asset owners to implement segmentation, access controls, and Zero Trust strategies.
Risk Management and Ethical Considerations
- Work closely with regional security and risk peers to foresee and mitigate risks, ensuring ethical operations and compliance with upcoming regulations.
Job Qualification:
Required Qualifications & Experience:
- 4+ years of experience in cybersecurity with a focus on blue teaming, security operations, and cyber defense.
- 2+ years working with the Crowdstrike Falcon Platform
- Required at least two (2) of the Certifications from the “Desired Certifications” list.
- Foundational expertise in both IT and OT security, with knowledge of ICS, SCADA, and industrial cyber threats.
- Experience securing R&D environments, including embedded systems, proprietary technologies, and intellectual property.
- Hands-on experience with SIEM, EDR, NDR, threat intelligence platforms, and security automation.
- Knowledge of MITRE ATT&CK (Enterprise & ICS), NIST 800-82, IEC 62443, and Zero Trust principles.
- Experience leading a team of cybersecurity professionals and developing operational security teams.
- Fundamental understanding of cloud security (AWS, Azure, GCP) and hybrid security architectures.
Desired Certifications
- GIAC Associate Certified Incident Handler
- GIAC Associate Security Operations Certified
- GIAC Security Essentials (GSEC)
- Associate Certified Cloud Security Professional (CCSP)
- Certified Information Systems Security Professional (CISSP)
- COMPTIA Security +
- COMPTIA CYSA+
- AWS Certified Security
- Microsoft SC - 200
#LI-FCC3
More information about NXP in Mexico...
#LI-fcc3
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.