Senior IT Security Engineer

Jobgether; Brazil; Remote; BRL 180,000 - 320,000; Full time

Benefits offered by this job

Fully remote within Brazil

Brazilian PJ contractor arrangement

Senior-level ownership

Job summary

Jobgether is seeking a Senior IT Security Engineer based in Brazil to strengthen incident response across the Americas. You will coordinate incidents from detection through resolution, lead investigations, and align with global security standards.

The role involves cross-functional collaboration with IT Ops, Cyber Defense Center, and leadership. You will develop runbooks, improve playbooks, and mentor junior staff while staying ahead of AI-enabled threats.

Qualifications

• Proven experience in cybersecurity incident response and post-incident analysis.
• Hands-on forensics, evidence handling, and chain of custody.
• Experience with SIEM platforms and security operations processes.
• Broad knowledge of IT environments including cloud and on-prem networks.
• Programming or scripting in at least one language (Python/PowerShell/Bash).
• Understanding of governance, risk and privacy concepts in corporate security.

Responsibilities

• Serve as primary liaison between regional IT Ops and global Cyber Defense Center.
• Coordinate full incident lifecycle from detection to closure.
• Lead incident investigations, containment, and recovery activities.
• Prepare detailed findings for technical and executive audiences.
• Develop and improve incident response playbooks and runbooks.
• Mentor junior responders and collaborate across international teams.

Skills

Incident response

Digital forensics

SIEM platforms

Threat intelligence

Windows, Linux/UNIX

Cloud security (AWS/Azure)

Programming scripting (Python/PowerCLI

Tools

Forensic tools

Security monitoring tools

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior IT Security Engineer based in Brazil.

We are seeking an experienced Senior IT Security Engineer specializing in Incident Response to strengthen cybersecurity operations across the Americas. In this role, you will act as the primary liaison between regional IT Operations teams and a global Cyber Defense Center, coordinating security incidents from initial detection through resolution. You will lead incident investigations, threat analysis, containment, recovery, and digital forensic activities while ensuring alignment with global security standards. Working in an international and multicultural environment, you will collaborate with technical teams, business stakeholders, and senior leadership to minimize security risks and strengthen organizational resilience. You will also contribute to the continuous improvement of incident response processes and develop strategies to address emerging cyber threats, including AI-powered attacks.

Accountabilities

• Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for cybersecurity incident management.
• Coordinate the complete security incident lifecycle, including triage, investigation, containment, eradication, recovery, escalation, and post-incident reviews.
• Manage regional security incidents from detection to closure, ensuring compliance with global response procedures and identifying operational gaps.
• Maintain clear and timely communication with technical teams, regional stakeholders, senior management, and executive leadership throughout incident investigations.
• Develop a comprehensive understanding of regional business units, IT environments, operational workflows, technology dependencies, and security risks.
• Conduct digital forensic investigations while ensuring proper evidence collection, preservation, integrity, chain of custody, and documentation.
• Perform security analysis across Windows, Linux/UNIX, cloud, network, email, endpoint, and enterprise technology environments.
• Investigate security alerts, system logs, threat intelligence, incident tickets, and reports using SIEM platforms and other security operations tools.
• Prepare detailed investigation findings, incident briefings, risk assessments, and post-incident reports for both technical and non-technical audiences.
• Monitor emerging AI-enabled cyber threats and defensive technologies, including deepfakes, automated phishing, adversarial machine learning, response automation, and AI-assisted threat intelligence.
• Develop and continuously improve incident response playbooks, operational procedures, runbooks, security tools, and service improvement initiatives.
• Mentor junior incident responders, share technical expertise, and contribute to strengthening regional cybersecurity capabilities.

Requirements

• Strong professional experience in cybersecurity incident response, security operations, incident coordination, containment, recovery, and post-incident analysis.
• Hands-on expertise in digital forensics, evidence handling, chain of custody, log analysis, threat intelligence, and investigative documentation.
• Experience working with SIEM platforms, security monitoring solutions, email security tools, ticketing systems, and enterprise security operations processes.
• Broad technical knowledge of enterprise IT environments, including Windows, Linux/UNIX, directory services, AWS, Azure, mobile device management, virtualization, networks, web servers, databases, and firewalls.
• Proficiency in at least one programming or scripting language, such as Python, PowerShell, or Bash.
• Understanding of security controls, security operations, risk management, and enterprise information security governance.
• Familiarity with artificial intelligence and machine learning concepts, particularly their application to cyber threats, detection, response automation, and defensive security technologies.
• Excellent analytical thinking, problem-solving, prioritization, and decision-making abilities, especially when managing high-impact security incidents.
• Strong written and verbal communication skills, with the ability to present complex technical findings and brief senior management and executive stakeholders.
• Proven ability to collaborate effectively across international, multicultural, and geographically distributed teams.
• Fluency in English, both written and spoken.
• Preferred qualifications: Professional certifications such as CISSP, GCIH, GIAC, CISA, CISM, CompTIA CySA+, or equivalent cybersecurity credentials.
• Preferred qualifications: Experience with cloud incident response and cloud-native security tools in AWS or Azure environments.
• Preferred qualifications: Knowledge of enterprise security governance frameworks and global information security policies.
• Preferred qualifications: Familiarity with privacy and regulatory requirements across the Americas, including Brazil's LGPD, US state privacy laws, and Canadian privacy regulations.
• Preferred qualifications: Relevant training or certifications in artificial intelligence or machine learning security.
• Preferred qualifications: Knowledge of Spanish or Portuguese in addition to English.

Benefits

• Competitive and negotiable compensation based on experience and qualifications.
• Fully remote working arrangement within Brazil.
• Full-time professional engagement under a Brazilian PJ (contractor) arrangement.
• Senior-level position offering significant ownership and responsibility in cybersecurity incident response.
• Opportunity to collaborate with global Cyber Defense and IT Operations teams.
• Exposure to advanced cybersecurity technologies, digital forensics, cloud security, and AI-driven threat detection.
• Opportunities to mentor other security professionals and contribute to global security initiatives.
• Professional development through involvement in complex, high-impact security investigations and continuous improvement projects.