Senior Security and Operations Analyst

Jobtailor; São Paulo; Presencial; BRL 90 000 - 150 000; Tempo integral

Resumo da oferta

Jobtailor in São Paulo, Brazil, seeks a skilled cybersecurity incident responder to monitor, classify, and manage security incidents across endpoints, networks, and applications. You will document actions, communicate with teams and vendors, and contribute to process improvements.

The role requires extensive experience in SIEM, incident response, and cloud/forensic investigations, with strong knowledge of frameworks and best practices.

Qualificações

• Bachelor’s degree and strong knowledge of cybersecurity fundamentals.
• Experience in 24/7 SOC/CSIRT incident handling and response.
• Familiarity with security frameworks and incident management processes.
• Hands-on with SIEM, logs, and event correlation.

Responsabilidades

• Continuously monitor security events and alerts using SIEM platforms.
• Classify and handle security incidents according to severity and impact.
• Investigate endpoints, networks, and applications to determine root cause.
• Escalate and communicate with internal teams and vendors when necessary.
• Document incidents, actions taken, and mitigation recommendations.
• Contribute to continuous improvement of monitoring and response processes.
• Participate in incident simulations and tabletop exercises.
• Collaborate with IT and Security teams to implement preventive controls.

Conhecimentos

Incident Response

SIEM Solutions

Log Analysis

Threat Intelligence

Forensic Analysis

Formação académica

Bachelor’s degree completed

Ferramentas

EDR/XDR Investigation

DLP

WAF

NAC Solutions

Descrição da oferta de emprego

• Continuously monitor security events and alerts using SIEM platforms.
• Classify and handle security incidents according to their severity and impact.
• Investigate endpoints, networks, and applications to determine root cause.
• Escalate and communicate with internal teams and vendors when necessary.
• Thoroughly document incidents, actions taken, and mitigation recommendations.
• Contribute to the continuous improvement of monitoring and response processes.
• Participate in incident simulations and tests (tabletop exercises).
• Collaborate with IT and Security teams to implement preventive controls.

Requirements

• Bachelor’s degree completed.
• Solid understanding of network protocols, OSI/TCP models, and traffic analysis.
• Extensive experience in information security and cybersecurity incident response, working in 24/7 SOC/CSIRT environments.
• Proficiency in NIST SP 800-61, NIST SP 800-184, MITRE ATT&CK, Cyber Kill Chain, ISO 27001, ISO 22301, and CIS Controls.
• Experience with log analysis and event correlation in SIEM solutions.
• Experience investigating EDR/XDR, DLP, CASB, WAF, Proxy, Firewall, IPS/IDS, Anti-Spam, NDR, and NAC solutions.
• Experience investigating cloud environments.
• Knowledge of Linux and Windows Server, including basic forensic analysis of artifacts, memory, and logs.
• Familiarity with Threat Intelligence and the ingestion/use of IoCs (MISP, FS-ISAC, paid feeds, and OSINT).
• Automation of incident response processes.
• Basic knowledge of malware analysis (dynamic and static) and sandboxing.
• Preferred but not required certifications include: GCIH, GCFA, GCFE, GNFA, CISSP, CompTIA CySA+, CompTIA Security+, CEH, Splunk Certified Power User/Admin, Microsoft SC-200, AWS Security Specialty, Azure Security Engineer, EC-Council ECIH, among others.
• This position is also open to people with disabilities (PwD).

Core Competencies

Demonstrates expertise in cybersecurity incident response, including proficiency in SIEM platforms, incident classification, and root cause analysis. Strong understanding of security frameworks and protocols, with a focus on continuous improvement and collaboration with IT and Security teams.

Highest-signal resume keywords

• Incident Response
• SIEM Solutions
• NIST SP 800-61
• Cybersecurity
• Log Analysis

ATS Optimization Keywords

Hard Skills

• Network Protocols
• Traffic Analysis
• EDR/XDR Investigation
• Malware Analysis
• Forensic Analysis

Soft Skills

• Communication
• Collaboration
• Documentation

Certifications & Qualifications

• GCIH
• CISSP
• CompTIA Security+
• AWS Security Specialty
• Microsoft SC-200

Industry Keywords

• SOC
• CSIRT
• MITRE ATT&CK
• ISO 27001
• Threat Intelligence

Tools & Technologies

• SIEM Platforms
• DLP Solutions
• WAF
• Firewall
• NAC Solutions