Senior Blue Team Analyst

Antisec; Brasil; Teletrabalho; BRL 150 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Certifications budget

Health insurance

Flexible hours

Modern equipment

Performance bonuses

Professional development budget

Resumo da oferta

Antisec in Brazil is seeking a Senior Blue Team Analyst to protect client infrastructure through threat detection, incident response and continuous security monitoring.

You will work with SIEM, EDR and threat intelligence platforms, conduct forensics and malware analysis, and develop detection rules while mentoring junior teammates in a collaborative security-first environment.

Qualificações

• 5+ years of experience in security operations, incident response, or SOC environments.
• Strong knowledge of SIEM platforms (Splunk, ELK, QRadar, or similar).
• Experience with EDR/XDR solutions.
• Expertise in network traffic analysis and packet inspection.
• Understanding of threat intelligence and IOC analysis.
• Knowledge of MITRE ATT&CK framework.
• Experience with digital forensics tools and methodologies.
• Strong understanding of Windows, Linux, and cloud security.
• Relevant certifications (GCIH, GCIA, GCFA, or similar) are highly valued.
• Excellent analytical and problem-solving skills.
• Fluent in Portuguese (English is a plus).
• Competitive salary based on experience
• Flexible hours
• Budget for certifications and professional development
• Health and dental insurance
• Performance bonuses
• Modern equipment and tools provided
• Access to cutting-edge security platforms
• Collaborative and learning-focused environment

Responsabilidades

• Monitor and analyze security events using SIEM platforms
• Conduct threat hunting and proactive security investigations
• Lead incident response activities and coordinate containment efforts
• Perform digital forensics and malware analysis
• Develop and tune detection rules and security alerts
• Implement security hardening measures across client environments
• Collaborate with Red Team for Purple Team exercises
• Create and maintain incident response playbooks
• Provide security guidance and recommendations to clients
• Mentor junior team members

Conhecimentos

Threat detection

Incident response

Threat hunting

Digital forensics

Malware analysis

Network traffic analysis

Problem solving

Portuguese fluency

Ferramentas

Splunk

ELK

QRadar

EDR/XDR

Wireshark

Descrição da oferta de emprego

Remote (Brazil) Full-time Competitive (based on experience)

Join our defensive security team as a Senior Blue Team Analyst. Protect our clients' infrastructure through advanced threat detection, incident response, and continuous security monitoring. Work with state-of-the-art SIEM, EDR, and threat intelligence platforms.

Responsibilities

• Monitor and analyze security events using SIEM platforms
• Conduct threat hunting and proactive security investigations
• Lead incident response activities and coordinate containment efforts
• Perform digital forensics and malware analysis
• Develop and tune detection rules and security alerts
• Implement security hardening measures across client environments
• Collaborate with Red Team for Purple Team exercises
• Create and maintain incident response playbooks
• Provide security guidance and recommendations to clients
• Mentor junior team members

Requirements

• 5+ years of experience in security operations, incident response, or SOC environments
• Strong knowledge of SIEM platforms (Splunk, ELK, QRadar, or similar)
• Experience with EDR/XDR solutions
• Expertise in network traffic analysis and packet inspection
• Understanding of threat intelligence and IOC analysis
• Knowledge of MITRE ATT&CK framework
• Experience with digital forensics tools and methodologies
• Strong understanding of Windows, Linux, and cloud security
• Relevant certifications (GCIH, GCIA, GCFA, or similar) are highly valued
• Excellent analytical and problem-solving skills
• Fluent in Portuguese (English is a plus)
• Competitive salary based on experience
• Flexible hours
• Budget for certifications and professional development
• Health and dental insurance
• Performance bonuses
• Modern equipment and tools provided
• Access to cutting-edge security platforms
• Collaborative and learning-focused environment