Sr Subject Matter Expert (DFS)
Mexico
Apply now
Job Description
Sr Subject Matter Expert (DFS)
Others, Mexico City

Job Summary

Job Summary : Job Summary We are seeking a Cyber Security Operations Analyst to support ongoing operations of the Vulnerability Disclosure Program (VDP/Bug Bounty) and Honeypot/Deception Technology services for a global media organization. The resource will be responsible for operational coordination, ticket management, monitoring, reporting, stakeholder engagement, administration, and process governance for the YesWeHack platform and Canary/Honeypot solutions. The role focuses on day-to-day service operations rather than platform deployment or implementation Key Responsibilities Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms • Thinkst Canary or other Deception Technology solutions • Security Ticketing Systems (ServiceNow, Jira, etc.) • Basic Log Analysis • Microsoft Excel and Reporting Tools Soft Skills • Strong stakeholder management • Excellent written and verbal communication • Service-oriented mindset • Documentation and reporting skills • Ability to coordinate across multiple teams Preferred Experience • Experience managing Bug Bounty or Vulnerability Disclosure Programs. • Experience supporting Honeypot or Deception Technology platforms. • Experience within SOC or Managed Security Services environments. • Familiarity with cybersecurity governance and operational reporting. • Exposure to vulnerability remediation workflows. Preferred Certifications • CompTIA Security+ • Microsoft SC-200 • CEH • CySA+ • ITIL Foundation

 

Key Responsibilities

Job Summary : Job Summary We are seeking a Cyber Security Operations Analyst to support ongoing operations of the Vulnerability Disclosure Program (VDP/Bug Bounty) and Honeypot/Deception Technology services for a global media organization. The resource will be responsible for operational coordination, ticket management, monitoring, reporting, stakeholder engagement, administration, and process governance for the YesWeHack platform and Canary/Honeypot solutions. The role focuses on day-to-day service operations rather than platform deployment or implementation Key Responsibilities Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms • Thinkst Canary or other Deception Technology solutions • Security Ticketing Systems (ServiceNow, Jira, etc.) • Basic Log Analysis • Microsoft Excel and Reporting Tools Soft Skills • Strong stakeholder management • Excellent written and verbal communication • Service-oriented mindset • Documentation and reporting skills • Ability to coordinate across multiple teams Preferred Experience • Experience managing Bug Bounty or Vulnerability Disclosure Programs. • Experience supporting Honeypot or Deception Technology platforms. • Experience within SOC or Managed Security Services environments. • Familiarity with cybersecurity governance and operational reporting. • Exposure to vulnerability remediation workflows. Preferred Certifications • CompTIA Security+ • Microsoft SC-200 • CEH • CySA+ • ITIL Foundation

 

Skill Requirements

Job Summary : Job Summary We are seeking a Cyber Security Operations Analyst to support ongoing operations of the Vulnerability Disclosure Program (VDP/Bug Bounty) and Honeypot/Deception Technology services for a global media organization. The resource will be responsible for operational coordination, ticket management, monitoring, reporting, stakeholder engagement, administration, and process governance for the YesWeHack platform and Canary/Honeypot solutions. The role focuses on day-to-day service operations rather than platform deployment or implementation Key Responsibilities Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms • Thinkst Canary or other Deception Technology solutions • Security Ticketing Systems (ServiceNow, Jira, etc.) • Basic Log Analysis • Microsoft Excel and Reporting Tools Soft Skills • Strong stakeholder management • Excellent written and verbal communication • Service-oriented mindset • Documentation and reporting skills • Ability to coordinate across multiple teams Preferred Experience • Experience managing Bug Bounty or Vulnerability Disclosure Programs. • Experience supporting Honeypot or Deception Technology platforms. • Experience within SOC or Managed Security Services environments. • Familiarity with cybersecurity governance and operational reporting. • Exposure to vulnerability remediation workflows. Preferred Certifications • CompTIA Security+ • Microsoft SC-200 • CEH • CySA+ • ITIL Foundation

 

Other Requirements

Job Summary : Job Summary We are seeking a Cyber Security Operations Analyst to support ongoing operations of the Vulnerability Disclosure Program (VDP/Bug Bounty) and Honeypot/Deception Technology services for a global media organization. The resource will be responsible for operational coordination, ticket management, monitoring, reporting, stakeholder engagement, administration, and process governance for the YesWeHack platform and Canary/Honeypot solutions. The role focuses on day-to-day service operations rather than platform deployment or implementation Key Responsibilities Vulnerability Disclosure Program (VDP) Operations • Manage VDP intake requests and operational ticket queues. • Facilitate case management between the bug bounty platform provider (YesWeHack) and business stakeholders. • Track vulnerability remediation activities through closure. • Coordinate follow-ups with application owners and business contacts. • Maintain operational dashboards and reporting metrics. • Ensure timely processing and governance of vulnerability submissions. Honeypot / Deception Technology Operations • Manage Canary/Honeypot-related service requests. • Perform platform monitoring and initial alert triage. • Execute approved administrative activities, including creation and modification of Canary configurations. • Support routine platform maintenance activities. • Coordinate customer requests related to deception technology services. • Escalate suspicious findings to the appropriate security teams for further investigation. Reporting & Service Administration • Coordinate daily operational activities. • Manage reporting and administration activities. • Support daily security insights, dashboards, and presentations. • Generate operational metrics, KPI reports, and service statistics. • Maintain SOPs, workflows, process documentation, and configuration records. • Ensure operational documentation remains current and audit ready. Stakeholder Coordination • Act as a liaison between business teams, security operations, and solution providers. • Facilitate communication for ticket resolution and service requests. • Coordinate remediation tracking and status reporting. • Participate in operational reviews and service governance discussions. Required Skills Security Operations • SOC Operations • Security Monitoring • Alert Triage • Incident Management • Vulnerability Management Concepts • Security Reporting Technical Skills • Bug Bounty / VDP Operations • YesWeHack, HackerOne, or similar platforms • Thinkst Canary or other Deception Technology solutions • Security Ticketing Systems (ServiceNow, Jira, etc.) • Basic Log Analysis • Microsoft Excel and Reporting Tools Soft Skills • Strong stakeholder management • Excellent written and verbal communication • Service-oriented mindset • Documentation and reporting skills • Ability to coordinate across multiple teams Preferred Experience • Experience managing Bug Bounty or Vulnerability Disclosure Programs. • Experience supporting Honeypot or Deception Technology platforms. • Experience within SOC or Managed Security Services environments. • Familiarity with cybersecurity governance and operational reporting. • Exposure to vulnerability remediation workflows. Preferred Certifications • CompTIA Security+ • Microsoft SC-200 • CEH • CySA+ • ITIL Foundation

 
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.