SENIOR ANALYST IN CYBER MONITORING PLATFORM ENGINEERING

Stellantis; Betim; On-site; BRL 180,000 - 260,000; Full time

Job summary

A Stellantis está recrutando para atuar como profissional de Segurança Cibernética, contribuindo com o design, operação e melhoria de plataformas de monitoramento. Foco em tecnologias Microsoft e integração com Azure, em ambientes on‑prem, cloud e híbridos.

Você participará de operações SOC, detecção, hunting e resposta a incidentes, com atuação prática em IaC, CI/CD e automação. O cargo exige disponibilidade para trabalho onsite em Betim, MG, Brasil.

Qualifications

• Conhecimento prático de Microsoft Sentinel, Defender XDR e Microsoft Security Copilot.
• Compreensão de arquitetura de segurança Azure, redes Azure e gestão de identidade com Entra ID.
• Conhecimento de conceitos SIEM/XDR, operações SOC e fluxos de monitoramento cibernético.
• Experiência com Infrastructure as Code, pipelines CI/CD e ferramentas de automação.
• Habilidades em ingestão de logs, normalização de dados, consultas KQL e otimização de plataformas SIEM.
• Graduação em área tecnológica ou equivalente.
• Proatividade em inglês avançado.
• Disponibilidade para atuar onsite em Betim (MG), Brasil.

Responsibilities

• Projetar, implantar e melhorar plataformas de monitoramento cibernético baseadas no Microsoft Sentinel e Defender XDR.
• Garantir disponibilidade, desempenho, resiliência e segurança das plataformas de monitoramento.
• Gerenciar acesso a plataformas com Azure AD/Entra ID, RBAC e controles de acesso privilegiado.
• Conduzir ciclos de vida da plataforma: upgrades, patches, mudanças de configuração e capacity planning.
• Onboard e otimizar fontes de log de ambientes on‑prem, cloud e SaaS.
• Implementar automação e IaC com Terraform, ARM/Bicep e pipelines CI/CD.
• Apoiar operações SOC, engenharia de detecção, threat hunting e resposta a incidentes.
• Produzir documentação técnica, diagramas de arquitetura e runbooks.

Skills

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Security Copilot

Azure security architecture

Azure networking

Identity and access management

SIEM/XDR concepts

SOC operations

Infrastructure as Code

CI/CD pipelines

Automation tools

Log ingestion

KQL querying

PowerShell

Python

Education

Bachelor’s degree in a technology-related field

Tools

Terraform

ARM/Bicep

Logic Apps

CI/CD pipelines

Job description

Descrição: Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

In this role, the person will act as a key technical contributor within the Cyber Defense and SOC ecosystem, being responsible for the design, operation, and continuous improvement of cyber monitoring platforms, with a strong focus on Microsoft security technologies, ensuring scalable, resilient, and effective monitoring capabilities across on-prem, cloud, and hybrid environments.

Main Responsibilities:

• Design, deploy, operate, and continuously improve cyber monitoring platforms based on Microsoft Sentinel and the Microsoft Defender XDR ecosystem;
• Ensure availability, performance, resilience, and security of monitoring platforms across production and pre-production environments;
• Administer platform access using Azure AD / Entra ID, RBAC, and privileged access controls;
• Manage platform lifecycle activities including upgrades, patching, configuration changes, and capacity planning;
• Onboard, maintain, and optimize log sources and ingestion pipelines from on-prem, cloud, SaaS, and third‑party security tools;
• Implement automation and Infrastructure as Code using Terraform, ARM/Bicep, and CI/CD pipelines;
• Support SOC operations, detection engineering, threat hunting, and incident response through platform enablement;
• Produce and maintain technical documentation, architecture diagrams, and operational runbooks.

Requisitos:

We expect you to have:

• Hands‑on knowledge of Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Security Copilot;
• Understanding of Azure security architecture, Azure networking, and identity and access management with Entra ID;
• Knowledge of SIEM/XDR concepts, SOC operations, and cyber monitoring workflows;
• Experience with Infrastructure as Code, CI/CD pipelines, and automation tools;
• Skills in log ingestion, data normalization, KQL querying, and SIEM platform optimization;
• Bachelor’s degree completed in a technology‑related field or equivalent;
• Advanced English proficiency;
• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Knowledge of MITRE ATT&CK and its application to detection and monitoring strategies;
• Experience with scripting languages such as PowerShell, KQL, or Python;
• Familiarity with SOAR capabilities using Sentinel automation rules and Logic Apps;
• Exposure to large‑scale, enterprise security environments;
• Relevant Microsoft security certifications.