Senior Cybersecurity Engineer

Michael Page International do Brasil Recrutamento Especializado Ltda; Curitiba; Presencial; BRL 120 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Modelo de trabalho híbrido

Benefícios competitivos e estrutura de bônus

Desenvolvimento de carreira

Resumo da oferta

A Michael Page International do Brasil Recrutamento Especializado Ltda está buscando um especialista em Operações de Segurança Cibernética em Curitiba. O candidato será responsável pela resposta a incidentes de segurança e pela gestão de vulnerabilidades em um ambiente desafiador e técnico.

Oferecemos um contrato CLT com benefícios competitivos, um modelo de trabalho híbrido e oportunidades de interação com stakeholders internacionais em um contexto de transformação global.

Qualificações

• Experiência forte em operações de cibersegurança e resposta a incidentes.
• Especialização em SIEM e EDR.
• Experiência com ambientes críticos e complexos.
• Conhecimento de ambientes de nuvem, especialmente AWS.
• Autônomo e analítico, confortável em cenários de alta pressão.

Responsabilidades

• Responder a incidentes de segurança em ambientes empresariais.
• Gerenciar o ciclo de vida da gestão de vulnerabilidades.
• Apoiar a definição e aplicação de controles de segurança.
• Participar da administração de ferramentas de segurança.
• Contribuir para atividades de conscientização sobre segurança.

Conhecimentos

Operações de Cibersegurança / Resposta a Incidentes

SIEM, EDR (SentinelOne), redes e sistemas operacionais (Windows/Linux)

Ambientes críticos e complexos

Ambientes em nuvem (AWS)

Ambientes industriais ou OT

Inglês avançado

Descrição da oferta de emprego

Sobre nosso cliente

Our client is a global leader in connectivity and optical infrastructure solutions, operating in highly critical environments such as telecom, data centers, and industrial networks.
​The company is currently going through an exciting phase of global integration and transformation, offering a dynamic, collaborative environment with strong exposure to international teams and projects.

Descrição

Incident Response & Security Operations

• Serve as the primary technical responder for security incidents across the enterprise environment, including IT and OT‑adjacent systems.
• Lead triage, classification, and prioritization of security incidents; execute containment, eradication, and recovery actions with full documentation.
• Perform intermediate to advanced digital forensics – artifact collection, memory and disk analysis, log correlation, timeline reconstruction, and chain of custody handling.
• Monitor, analyze, and investigate alerts and events across SIEM, EDR (e.g., SentinelOne), and network monitoring platforms.
• Produce detailed technical incident reports and contribute to executive‑level post‑incident summaries.
• Develop and maintain incident response playbooks and response procedures.

Vulnerability Management

• Own the vulnerability management lifecycle: coordinate scanning, track findings, drive prioritization based on risk and asset criticality, and follow up with infrastructure and application teams on remediation.
• Monitor for emerging threats and newly disclosed vulnerabilities; assess applicability to the environment and communicate urgency to relevant stakeholders.

Security Program Contribution

• Support the definition and enforcement of security controls across infrastructure, endpoints, identity, and cloud environments.
• Participate in the administration and optimization of security tooling (SIEM, EDR, endpoint management, vulnerability scanners).
• Contribute to the development and maintenance of security documentation, standards, and operational procedures.
• Work alongside infrastructure, network, and software development teams on security requirements for projects and changes.
• Contribute to security awareness activities and foster a security‑conscious organizational culture.

Perfil desejável

• Strong experience in Cybersecurity Operations / Incident Response
• Hands‑on expertise with SIEM, EDR (SentinelOne), networking, and operating systems (Windows/Linux)
• Experience in complex and critical environments
• Knowledge of cloud environments (AWS)
• Exposure to industrial or OT environments is a strong plus
• Advanced English skills, with the ability to interact in a global environment
• Autonomous, analytical, and comfortable working in high‑pressure scenarios

O que está sendo ofertado

• CLT contract + competitive benefits and bonus structure
• Hybrid work model (based in Curitiba), with approximately 2 days per week in the office and a good level of flexibility
• Direct interaction with international stakeholders and global teams
• Opportunity to work in a highly technical and challenging environment, with exposure to complex security scenarios
• Strong career development potential within a global transformation context