Security Operations Engineer

Koud; Brasil; Presencial; BRL 120 000 - 190 000; Tempo integral

Resumo da oferta

Koud is seeking a Security Operations Engineer to own and lead the cybersecurity operations across a portfolio of managed services clients. You will manage centralized security platforms, monitor and respond to incidents, and produce client-facing reports while improving security standards and playbooks.

The role emphasizes proactive monitoring, rapid response, and clear communication with clients during security events and investigations. Related certifications and MSP experience are valued.

Qualificações

• Experience in IT support, systems administration, cybersecurity, or MSP operations.
• Experience managing Microsoft 365 environments.
• Experience with incident response, email security, endpoint security, networking, and identity management.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to manage multiple priorities and work independently.
• Fluent English.

Responsabilidades

• Own and administrate the company's centralized security platforms and related systems.
• Monitor, triage, investigate, and remediate security alerts and incidents.
• Lead incident response activities from investigation through containment, remediation, and client communication.
• Prepare incident reports, after-action reviews, and client-facing summaries.
• Develop and maintain security standards, procedures, playbooks, and processes.
• Coordinate vulnerability remediation and security hardening efforts.
• Communicate with clients regarding investigations and remediation activities.
• Lead security incident bridge calls and provide status updates to stakeholders.

Conhecimentos

IT support

Systems administration

Cybersecurity

MSP operations

Microsoft 365 environments

English fluency

Ferramentas

Microsoft 365

Descrição da oferta de emprego

Koud is looking for a Security Operations Engineer to work with one of our clients to own and lead the cybersecurity operations function across a portfolio of managed services clients.

Key Objectives:

• Reduce cybersecurity risk for company clients through proactive monitoring, rapid response, and continuous improvement;
• Own day-to-day security operations;
• Maintain and improve the company's managed security services portfolio;
• Deliver outstanding client communication during security events and investigations.

Responsibilities:

• Own and administer company's centralized security platforms, including endpoint security, SaaS security monitoring, email security, backup monitoring, password management, RMM, identity security, and related systems;
• Monitor, triage, investigate, and remediate security alerts and incidents;
• Serve as the primary resource for phishing reviews, suspicious email analysis, business email compromise investigations, malware events, unauthorized access incidents, and other security-related tickets;
• Lead incident response activities from initial investigation through containment, remediation, recovery, documentation, and client communication;
• Prepare professional incident reports, after-action reviews, and client-facing summaries;
• Develop and maintain security standards, procedures, playbooks, and operational processes;
• Recommend security improvements, automation opportunities, and service enhancements;
• Manage security-related configurations for firewalls, secure remote access platforms, identity management systems, and other security infrastructure;
• Coordinate vulnerability remediation and security hardening efforts;
• Communicate directly with clients regarding investigations, security incidents, and remediation activities;
• Lead security incident bridge calls and provide status updates to stakeholders;
• Present findings and recommendations in a professional, business-friendly manner;
• Serve as a trusted advisor on operational cybersecurity matters;
• Support Microsoft 365, user accounts, workstations, networking, and business applications;
• Assist with escalations and technical troubleshooting during periods of increased service demand.

Required Qualifications:

• Experience in IT support, systems administration, cybersecurity, or MSP operations;
• Experience managing Microsoft 365 environments;
• Experience with incident response, email security, endpoint security, networking, and identity management;
• Strong troubleshooting, analytical, documentation, and communication skills;
• Ability to manage multiple priorities and work independently;
• Fluent English.

Preferred Qualifications:

• Experience working in an MSP environment;
• Security+, CySA+, Microsoft Security certifications, or equivalent experience;
• Experience developing processes, standards, and operational documentation.