Senior Security Engineer

Sur LATAM; São Paulo; Presencial; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A leading IT services company is seeking a Linux Cryptography and Security Engineer for its security team. This mid-senior level position involves tackling offensive and defensive security challenges, conducting system configurations, and improving SOC operations. Ideal candidates should have a strong background in security tools, scripting, and vulnerability assessments, with certifications like OSCP or OSWE being advantageous.

Serviços

Unlimited PTO

Flexible working hours

Qualificações

• Strong experience with system administration for Windows and Linux.
• Experience in a SOC or as a threat hunter is essential.
• Knowledge of cloud security (AWS, Azure, GCP) is a plus.

Responsabilidades

• Investigate and respond to security incidents as a Tier 2/3 SOC analyst.
• Configure and secure systems, including antivirus and firewalls.
• Perform web app/API pentests focusing on OWASP Top 10 vulnerabilities.

Conhecimentos

Communication

Troubleshooting

Python

PowerShell

Bash scripting

Windows system administration

Linux system administration

Vulnerability assessment

Incident response

Security analysis

Formação académica

OSCP Certification

OSWE Certification

CRTO Certification

Ferramentas

Burp Suite

Nmap

SQLmap

DefectDojo

Descrição da oferta de emprego

3 days ago Be among the first 25 applicants

You'll join a high-octane security team tackling offensive and defensive challenges. Whether diving into intricate web application pentesting or running purple team simulations, you'll collaborate with detection engineers, craft internal tools, challenge assumptions, and execute threat scenarios to fortify SOC operations.

Responsibilities

• Act as a Tier 2/3 SOC analyst: investigate and respond to security incidents.
• Configure and secure systems: antivirus, firewalls, OS hardening.
• Build scripts to automate agent deployment, policy cleanup, and scanning tools.
• Troubleshoot issues with tools like Antivirus, Qualys, DNS filters, and EDR.
• Perform manual and automated web app/API pentests (OWASP Top 10, logic bugs).
• Deliver PoCs and work with developers to fix security flaws.
• Run internal red team simulations and test SOC detection (at least quarterly).
• Improve detection rules and visibility in EDR and SIEM tools.
• Design threat scenarios and help defenders respond more effectively
  
  

Requirements

• Strong experience with Windows and Linux system administration.
• Managed 300+ servers
• Previous work in a SOC, threat hunting, or incident response role.
• Skilled with tools like Burp Suite, Nmap, SQLmap, etc.
• Proficient in Python, PowerShell, or Bash scripting.
• Solid communication skills in English.
• Experience using vulnerability tracking platforms (e.g., DefectDojo).
• Active Hack The Box, TryHackMe, or similar profile (include link if available)
• Bug bounty experience with public write-ups or results.
• Experience with red or purple team operations.
• Knowledge of C2 frameworks, adversary emulation, or payload creation.
• Cloud security knowledge (AWS, Azure, or GCP).
• Certifications like OSCP, OSWE, CRTO, or similar
  
  

Benefits

Salary Range: $3000-$4500 USD + Holidays

PTO: Unlimited

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Other

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Sur LATAM by 2x

Linux Cryptography and Security Engineer

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.