Threat Hunting Analyst

Jobtailor; Brasília; Presencial; BRL 120 000 - 160 000; Tempo integral

Resumo da oferta

Jobtailor in Brasília, Brazil, is seeking a SIEM and Threat Hunting specialist to create and refine detection rules, conduct threat hunting, and analyze security logs across Windows, Linux, and Unix. You will develop cyber threat models and support incident response.

Collaborate with ISH teams, produce playbooks and RCAs, and engage with clients to advance security maturity. Relevant certifications like CompTIA Security+ or LPIC are a plus.

Qualificações

• Bachelor’s degree in Information Technology, Information Security, or a related field.
• Knowledge of Information Security frameworks, methodologies, and concepts (MITRE, OWASP, NIST, Cyber Kill Chain, CVE, HMM).
• Knowledge of SIEM: creation, maintenance, and refinement of use cases and correlation rules.
• Knowledge of computer networks and the OSI Model.
• Knowledge of security logs in Windows, Linux, and Unix environments.
• Knowledge of analyzing security logs and events from Firewalls, IDS/IPS, EDR, WAF, Antispam, Access Control, Asset Management, and Vulnerability Scanning systems.
• CompTIA Security+, LPIC-I/II/III certifications are a plus.

Responsabilidades

• Create and refine SIEM use cases and detection rules
• Conduct threat hunting in SIEM environments to search for and identify potential cyber threats
• Analyze, validate, and maintain the quality and relevance of logs from monitored assets
• Develop and test cyber threat models
• Support Incident Response activities by contributing to security analyses and investigations
• Collaborate with other ISH teams in developing and advancing Threat Hunting activities
• Engage in technical interactions with clients, supporting the development and advancement of their security maturity
• Prepare and maintain technical documentation, such as playbooks and RCAs
• Provide technical support to clients through tickets related to Threat Hunting

Conhecimentos

SIEM Use Case Development

Threat Hunting

Security Log Analysis

Cyber Threat Modeling

Incident Response

Network Security

Log Correlation Rules

Vulnerability Scanning

Firewall Analysis

EDR Analysis

Formação académica

Bachelor’s degree in Information Technology, Information Security, or a related field

Ferramentas

Windows

Linux

Unix

IDS/IPS

WAF

Antispam

Access Control

Asset Management

Descrição da oferta de emprego

• Create and refine SIEM use cases and detection rules
• Conduct threat hunting in SIEM environments to search for and identify potential cyber threats
• Analyze, validate, and maintain the quality and relevance of logs from monitored assets
• Develop and test cyber threat models
• Support Incident Response activities by contributing to security analyses and investigations
• Collaborate with other ISH teams in developing and advancing Threat Hunting activities
• Engage in technical interactions with clients, supporting the development and advancement of their security maturity
• Prepare and maintain technical documentation, such as playbooks and RCAs
• Provide technical support to clients through tickets related to Threat Hunting

Requirements

• Bachelor’s degree in Information Technology, Information Security, or a related field
• Knowledge of Information Security frameworks, methodologies, and concepts, such as MITRE, OWASP, NIST, the Cyber Kill Chain, CVE, and HMM
• Knowledge of SIEM, including the creation, maintenance, and refinement of use cases and correlation rules
• Knowledge of computer networks and the OSI Model
• Knowledge of security log analysis in Windows, Linux, and Unix environments
• Knowledge of analyzing security logs and events from Firewalls, IDS/IPS, EDR, WAF, Antispam, Access Control, Asset Management, and Vulnerability Scanning systems
• CompTIA Security+, LPIC-I, LPIC-II, and/or LPIC-III certification is a plus

Core Competencies

Demonstrates expertise in SIEM use case creation, threat hunting, and security log analysis across various environments. Proficient in applying Information Security frameworks and methodologies to enhance security maturity and incident response.

Highest-signal resume keywords

• SIEM Use Case Development
• Threat Hunting
• Security Log Analysis
• Information Security Frameworks
• Incident Response Support

Hard Skills

• SIEM
• Threat Hunting
• Security Log Analysis
• Cyber Threat Modeling
• Incident Response
• Network Security
• Log Correlation Rules
• Vulnerability Scanning
• Firewall Analysis
• EDR Analysis

Soft Skills

• Collaboration
• Technical Communication
• Client Support

Certifications & Qualifications

• CompTIA Security+
• LPIC-I
• LPIC-II
• LPIC-III

Industry Keywords

• MITRE
• OWASP
• NIST
• Cyber Kill Chain
• CVE
• HMM
• OSI Model

Tools & Technologies

• Windows
• Linux
• Unix
• IDS/IPS
• WAF
• Antispam
• Access Control
• Asset Management