Security Engineer - Incident Response

CloudWalk, Inc.; São Paulo; Híbrido; BRL 150 000 - 190 000; Tempo integral

Resumo da oferta

CloudWalk, Inc. in São Paulo, Brazil, seeks a security engineer to build and own the security nervous system, including the SIEM, telemetry pipelines, enrichment and correlation across the org.

You will hunt before alerts fire, respond to incidents from first signal to containment and recovery, automate triage and evidence collection, and collaborate with Offensive Security to turn attack paths into detections. AI-driven investigation and log analysis are part of the role.

Qualificações

• Build and own security tooling and telemetry pipelines.
• Develop detections based on attacker behavior and red team findings.
• Investigate incidents from signal to containment and lessons learned.
• Proactively hunt for suspicious activity and visibility gaps.
• Automate triage, enrichment and evidence collection workflows.
• Collaborate with Offensive Security to convert attack paths into detections.
• Leverage AI for investigation, log analysis, alert enrichment and response.

Responsabilidades

• Own and improve the SIEM, telemetry pipelines, enrichment and correlation across CloudWalk.

Descrição da oferta de emprego

• Build our security nervous system. Own and improve the SIEM, telemetry pipelines, enrichment and correlation across CloudWalk.
• Create detections that matter. Turn attacker behavior, real incidents and Red Team findings into useful signals instead of alert spam.
• Respond when things get weird. Investigate incidents from first signal to containment, recovery and lessons learned.
• Hunt before alerts fire. Search proactively for suspicious behavior and visibility gaps.
• Automate aggressively. Build tools and workflows for triage, enrichment, evidence collection and containment.
• Work with attackers. The friendly kind. Partner closely with Offensive Security to turn attack paths into detections and controls.
• Use AI as leverage. Build agents and automations for investigation, log analysis, alert enrichment and response.