Cyber Response Analyst - INTL Brazil

Insight Global; Contagem; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Insight Global is seeking a Cyber Response Analyst to join the Enterprise Information Security team. You will handle the entire lifecycle of security incidents from detection to resolution, develop and maintain playbooks, and own critical security projects.

Responsibilities include leading incident response, reviewing alerts, and producing After Action Reports. Strong English and hands-on experience with SIEM/EDR/SOAR and related security tools are required.

Qualificações

• 3+ years of relevant professional experience.
• Advanced English.
• Hands-on experience with enterprise security tools such as SIEM, EDR, SOAR, threat intelligence platforms, and cloud security controls.

Responsabilidades

• Monitor active security incidents and lead response efforts, including triage, escalation, and coordination through resolution.
• Review alerts, incident escalations, and post-incident analyses to identify trends, gaps, and opportunities for improvement.
• Maintain and enhance incident response playbooks, runbooks, and documentation to reflect evolving threats and technologies.
• Detect, investigate, and respond to security events from firewalls, IDS, IPS, SIEM, WAF, Mail Gateway, DLP and other sources.
• Lead, coordinate, work closely with 24/7/365 monitoring, incident detection, and response using both internal resources and an industry leading MSS provider.
• Produce After Action Reports (AARs) to document and communicate post incident threats, risks, and lessons learned.

Conhecimentos

Incident response

English proficiency

Security tools knowledge

Ferramentas

SIEM

EDR

SOAR

Threat intelligence platforms

Cloud security controls

Descrição da oferta de emprego

Job Description

We are seeking a cyber Response Analyst to join the Enterprise Information Security team with one of our global manufacturing & Technology clients. As Cyber Response Analyst reporting to the Team Lead, you will be responsible for handling the entire lifecycle of security incidents from detection to resolution and root cause analysis. You will also develop, implement, and maintain standard documents, policies, and playbooks. In this role you will be responsible for handling and escalating security incidents and owning critical security projects. You should be comfortable with learning new technologies and highly motivated to develop and deploy cutting edge technologies. You must be security focused and driven to perform in a fast-paced environment. The day-to-day tasks & responsibilities include the following:

• Monitor active security incidents and lead response efforts, including triage, escalation, and coordination through resolution.
• Review alerts, incident escalations, and post-incident analyses to identify trends, gaps, and opportunities for improvement.
• Maintain and enhance incident response playbooks, runbooks, and documentation to reflect evolving threats and technologies.
• Detect, investigate, and respond to security events from firewalls, IDS, IPS, SIEM, WAF, Mail Gateway, DLP and other sources.
• Lead, coordinate, work closely with 24/7/365 monitoring, incident detection, and response using both internal resources and an industry leading MSS provider.
• Produce After Action Reports (AARs) to document and communicate post incident threats, risks, and lessons learned.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 3+ years of relevant professional experience
• Strong understanding of incident response lifecycles, including preparations, detection & analysis, containment, eradication, recovery, and post incident activity
• Advanced English
• Hands on experience with enterprise security tools such as:
• SIEM, EDR, SOAR, threat intelligence platforms, and cloud security controls
• Experience with Endpoint Detection and Response (EDR)