Security Specialist

Jobtailor; São Paulo; Presencial; BRL 180 000 - 240 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a seasoned Cyber Security Operations Specialist to act as the technical reference for security operations in a São Paulo environment. You will drive incident investigations, threat analysis, and containment actions while refining detection rules and playbooks across Elastic Security and SOAR platforms.

The role emphasizes building dashboards, threat hunting, and ongoing SOC maturity improvements, reporting to senior stakeholders and coordinating cross-functional teams in a

Qualificações

• Bachelor's degree completed in a relevant field.
• Postgraduate degree in Information Security or Cyber Security.
• Experience in Cyber Security Operations and CDCs.
• Experience in SOC N2/N3 environments and incident handling.
• Hands-on experience with SIEM solutions.

Responsabilidades

• Serve as the technical point of reference for Cyber Security operations.
• Lead investigations into medium- and high-severity security incidents.
• Perform advanced analysis of events, IOCs, and threats.
• Execute containment, remediation, and recovery actions for security incidents.
• Provide technical support during cyber crises and attacks.
• Administer and enhance use cases in Elastic Security.
• Create new correlation, detection, and alerting rules.
• Develop operational and executive dashboards.
• Conduct Threat Hunting activities.
• Analyze attack trends and patterns.
• Continuously improve SOC monitoring coverage.
• Create and maintain operational runbooks and playbooks.
• Structure incident response procedures.
• Prepare technical and executive reports.
• Participate in defining SOC performance indicators.
• Lead post-incident analyses (Lessons Learned).
• Lead PDCA-based initiatives to increase operational maturity.

Conhecimentos

Incident Detection and Response

Threat Analysis

Playbook Development

Runbook Development

Threat Hunting

Post-Incident Analysis

Operational Improvement

Root Cause Analysis

Correlation Rules Creation

Alerting Rules Creation

Formação académica

Bachelor's Degree

Postgraduate Degree In Information Security

Ferramentas

Elastic Security

SOAR

Fortinet Environments

Descrição da oferta de emprego

• Serve as the technical point of reference for Cyber Security operations
• Lead investigations into medium- and high-severity security incidents
• Perform advanced analysis of events, indicators of compromise (IOCs), and threats
• Execute containment, remediation, and recovery actions for security incidents
• Provide technical support during cyber crises and attacks
• Administer and enhance use cases in Elastic Security
• Create new correlation, detection, and alerting rules
• Develop operational and executive dashboards
• Conduct Threat Hunting activities
• Analyze attack trends and patterns
• Continuously improve SOC monitoring coverage
• Create and maintain operational runbooks and playbooks
• Structure incident response procedures
• Prepare technical and executive reports
• Participate in defining SOC performance indicators
• Lead post-incident analyses (Lessons Learned)
• Lead PDCA-based initiatives to increase operational maturity

Requirements

• Bachelor's degree completed
• Postgraduate degree in Information Security or Cyber Security
• Experience in Cyber Security Operations and Cyber Defense Centers (CDCs)
• Experience working in an SOC N2 or N3 environment
• Experience in incident detection and response
• Experience investigating security incidents
• Experience handling cyberattacks
• Experience developing playbooks and runbooks
• Hands-on experience with SIEM solutions
• Strong experience in Fortinet environments
• Experience leading operational improvements and root cause analysis
• Hands-on profile
• Advanced English proficiency
• Knowledge of security automation
• Knowledge of SOAR
• Experience with Purple Team activities

Core Competencies

Demonstrates expertise in Cyber Security Operations, including incident detection, response, and threat analysis. Proficient in developing operational procedures, enhancing security monitoring, and leading investigations in high-severity incidents.

Highest-signal resume keywords

• Cyber Security Operations
• Incident Detection And Response
• SIEM Solutions
• Fortinet Environments
• Security Automation

ATS Optimization Keywords

Hard Skills

• Incident Response
• Threat Analysis
• Playbook Development
• Runbook Development
• Threat Hunting
• Post-Incident Analysis
• Operational Improvement
• Root Cause Analysis
• Correlation Rules Creation
• Alerting Rules Creation

Soft Skills

• Technical Support
• Leadership
• Communication

Certifications & Qualifications

• Bachelor's Degree
• Postgraduate Degree In Information Security

Industry Keywords

• Cyber Defense Centers
• SOC N2
• SOC N3
• Indicators Of Compromise
• Cyberattacks

Tools & Technologies

• Elastic Security
• SOAR