Information Security Consultant – Mid-Level

Jobtailor; São Paulo; Presencial; BRL 100 000 - 167 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a Security Operations Center specialist to manage security tools across client environments and investigate alerts to drive remediation. You will analyze logs for decision support, prepare monthly client reports, and help develop runbooks and playbooks for routine SOC procedures.

This role involves Level 2 support, SLA adherence, and direct client liaison. Responsibilities include incident handling, war-room participation, vulnerability mapping, and coordinating with clients

Qualificações

• Experience in SOC operations with the full routines.
• Hands-on with commercial SIEM solutions.
• Experience analyzing logs in QRadar, Splunk, and Microsoft Sentinel.
• Intermediate to advanced networking knowledge.
• Knowledge of cloud platforms: Azure, AWS, or GCP.
• Knowledge of security methodologies (ISO, NIST, MITRE, OWASP, Cyber Kill Chain).
• Experience handling security incidents.
• Courses or training in Information Security, Computer Networks, or Windows/Linux Infrastructure.
• Basic English proficiency.

Responsabilidades

• Operate and manage security tools across client environments.
• Investigate alerts from SIEM and other tools, identify root causes and support remediation.
• Analyze and interpret logs, report information to support decision-making.
• Prepare monthly performance reports and client presentations.
• Support development of playbooks and runbooks for SOC procedures.
• Provide Level 2 support for tickets, escalate to Level 3 as needed and meet SLA.
• Handle critical alerts and incidents with clients via calls or phone.
• Attend client meetings, address questions, present results as technical liaison.
• Participate in war rooms to simulate scenarios and define response actions.
• Map client environments to support vulnerability identification.
• Apply OS patches to remediate flaws and mitigate vulnerabilities.

Conhecimentos

SOC Operations Experience

Incident Handling

Client Communication

Technical Liaison

Problem-Solving

Formação académica

Information Security Training

Computer Networks Training

Ferramentas

EDR

Firewalls

WAF

SIEM

GCP

Microsoft 365

Zscaler

SCCM

AWS

Descrição da oferta de emprego

• Operate and manage security tools, including EDR, firewalls, WAF, SIEM, GCP, Microsoft 365, Zscaler, SCCM, and AWS, across client environments


• Investigate and extract information from alerts generated by SIEM and other tools, identify root causes, and take action or support clients with remediation


• Analyze and interpret logs, reporting relevant information to support decision-making


• Prepare monthly performance reports and presentations for clients


• Support the development of playbooks and runbooks for routine SOC procedures and operations


• Provide Level 2 support for service tickets, escalating cases to Level 3 as needed and meeting SLA requirements


• Handle critical alerts and potential incidents with clients via conference calls or telephone


• Attend client meetings, address questions, present results, and serve as the technical liaison


• Participate in war rooms to simulate scenarios and define response actions


• Map client environments and technologies to support subsequent vulnerability identification


• Apply operating system patches to remediate flaws and assist in mitigating vulnerabilities

Requirements

• Experience in SOC operations, with knowledge of the department’s full range of routines


• Hands-on experience with commercial SIEM solutions


• Experience analyzing logs in QRadar, Splunk, and Microsoft Sentinel


• Intermediate to advanced knowledge of networking


• Knowledge of at least one cloud platform: Azure, AWS, or GCP


• Knowledge of at least one security methodology or framework, such as ISO, NIST, MITRE, OWASP, or the Cyber Kill Chain


• Experience handling security incidents


• Courses or training in Information Security, Computer Networks, or Windows/Linux Infrastructure


• Basic English proficiency

Core Competencies

Demonstrates expertise in Security Operations Center (SOC) procedures, incident response, and security tool management, with proficiency in analyzing logs and generating performance reports. Capable of supporting clients through effective communication and technical liaison roles while adhering to service level agreements.

Highest-signal resume keywords

• SOC Operations Experience


• Commercial SIEM Solutions


• Log Analysis in QRadar, Splunk, Microsoft Sentinel


• Cloud Platform Knowledge (AWS, GCP, Azure)


• Security Methodology Knowledge (ISO, NIST, MITRE, OWASP)

ATS Optimization Keywords

Hard Skills

• Security Tool Management


• Incident Response


• Log Analysis


• Vulnerability Identification


• Operating System Patching

Soft Skills

• Client Communication


• Technical Liaison


• Problem-Solving

Certifications & Qualifications

• Information Security Training


• Computer Networks Training

Industry Keywords

• Security Operations Center


• Incident Handling


• Cyber Kill Chain


• NIST


• ISO


• OWASP

Tools & Technologies

• EDR


• Firewalls


• WAF


• SIEM


• GCP


• Microsoft 365


• Zscaler


• SCCM


• AWS