Sr. Security Operations Engineer - Brazil

Ant International; São Paulo; Presencial; BRL 240 000 - 360 000; Tempo integral

Resumo da oferta

Ant International is expanding in Brazil and seeks its first Senior Security Operations Engineer to build local security strategy. You will own detection, response, and security across products, collaborating with global teams to shape an autonomy-driven security program.

You will lead SOC operations, embed security gates in the SDLC, and coordinate with Legal and Fraud for readiness, reporting to our Security Team in a fast-growing fintech environment.

Qualificações

• 7+ years of hands-on incident response, security engineering, or SecOps experience.
• Background in payments, banking, fintech, or regulated infrastructure.
• Bachelor's degree in a technology-related field; fluent with Portuguese and English.
• Security certifications such as CISM, GIAC, Security+, OSCP are highly desirable.

Responsabilidades

• Oversee daily SOC operations (SIEM/SOAR, EDR/NDR, WAF, cloud telemetry).
• Lead incident response as primary commander, coordinating triage, containment, and recovery.
• Manage vulnerability and patching across applications, cloud, and APIs.
• Embed security gates in the SDLC, CI/CD, and APIs; monitor cloud posture and backups.
• Develop and test playbooks for ransomware, cyber-fraud, API attacks, and outages.
• Coordinate with Legal, Fraud, and Communications on tabletop exercises.

Conhecimentos

Incident response

Security engineering

SIEM/SOAR

EDR

IAM/PAM

Cloud security

Threat intelligence

Penetration testing

CISM

GIAC

Security+

OSCP

Formação académica

Bachelor's degree in Technology, Engineering, Cybersecurity

Ferramentas

WAF

Descrição da oferta de emprego

Ant International is expanding its footprint in Brazil and seeking our first Senior Security Operations Engineer to build our local security strategy from the ground up. This is a unique opportunity to shape security operations within a highly regulated, fast-growing global Fintech, offering tremendous autonomy and strategic impact.

The Opportunity

As our first security hire in Brazil, you will lead the charge in preventing, detecting, and responding to threats across all Ant International products and services in the region. You will owner corporate security, detection and response, and application/infrastructure security domains, setting the operational rhythm for our local business while collaborating closely with our global teams.

Key Responsibilities

• Detection & Incident Response: Oversee daily SOC operations (SIEM/SOAR, EDR/NDR, WAF, Cloud telemetry). Act as the primary incident commander, driving technical triage, containment, and recovery while managing crisis governance and cross-team communication.
• Vulnerability & Exposure Management: Run continuous scanning across applications, cloud environments, and APIs. Prioritize patching based on threat intelligence and coordinate impartial annual penetration tests.
• Cloud, Data & App Security: Embed robust security gates within the SDLC, CI/CD, and APIs. Monitor cloud security posture, enforce cryptography/DLP protocols, and ensure secure backups and DR readiness.
• Threat Intelligence & Playbooks: Monitor the deep/dark web for actionable signals. Maintain and test critical playbooks covering ransomware, cyber-fraud, API attacks, and Pix/RSFN outages.
• Ecosystem & Compliance: Track third-party security SLAs, support BCB supervision inquiries, maintain audit evidence, and conduct tabletop readiness exercises with Legal, Fraud, and Communications teams.

Candidate Profile

• 7+ years of hands-on experience in incident response, security engineering, or SecOps, with a track record of owning complex technical initiatives.
• Solid background in payments, banking, Fintech, Pix, high-criticality e-commerce, or regulated infrastructure.
• Deep operational command of SIEM/SOAR, EDR, IAM/PAM, network/cloud security, and incident response frameworks.
• Bachelor's degree in Technology, Engineering, Cybersecurity, or a related field.
• Fluent Portuguese and advanced English to navigate a fast-paced, global operational structure.
• Highly Desirable: CISM, GIAC, Security+, OSCP, or equivalent cloud-security certifications.