.About the teamThe security operations center (SOC) monitors, detects, analyzes, and responds to security incidents in real-time. The SOC helps protect from cyber threats, minimizing damage caused by security breaches, and ensuring compliance with regulatory requirements and industry standards!Our objective is to protect computer systems, networks, and sensitive information from unauthorized access, use, disclosure, disruption, modification, or destruction.Zillow, the top real estate website in the U.S., is building an on-demand real estate experience. Whether selling, buying, renting or financing, customers can turn to Zillow to find and get into their next home with speed, certainty and ease. About the roleWe are seeking a motivated and detail-oriented Tier 1 SOC Analyst to join our cybersecurity team. In this entry-level role, you will play a key part in protecting our organization's digital assets by supporting investigation, detection, and response activities. This is an excellent opportunity for candidates with strong IT technical experience in administration, engineering, coding, or extensive help desk experience who are looking to transition into cybersecurity.You will assist with monitoring security alerts, analyzing potential threats, and collaborating with senior analysts to ensure the security of our systems. This role provides a phenomenal opportunity for growth, learning, and hands-on experience in a collaborative environment. As a SOC Analyst, you will:Monitor security alerts from various sources and escalate incidents as needed.Follow incident response playbooks for common scenarios such as phishing attempts, malware detection, and basic security incidents.Assist in initial investigations using tools like CrowdStrike, AWS GuardDuty, and Lacework under the guidance of senior analysts.Support the identification and logging of potential Indicators of Compromise (IOCs) using tools like Exabeam, O365 Defender, and other SIEM platforms.Participate in basic threat analysis and prioritize alerts based on severity.Assist with monitoring cloud environments (e.G., AWS) for security alerts, including misconfigurations and suspicious activity.Support the implementation of access controls and respond to simple cloud-related security incidents.Document incident details, actions taken, and lessons learned in the appropriate systems.Help refine and update response playbooks based on feedback and ongoing incidents.Document incident details, actions taken, and lessons learned in the appropriate systems.Help refine and update response playbooks based on feedback and ongoing incidents. This role has been categorized as a teleworker position. Teleworkers do not have a permanent corporate office workplace and, instead, work from a physical location of their choice which must be identified to the Company. Employees may live in any part of Mexico, but preferably in Mexico City, as we would encourage attendance for occasional in-office events