Cybersecurity Incident Response Analyst – Mid-Level

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Address security incidents across various technological environments at iFood, including cloud, on-premises, applications, pipelines, and operating systems.

• Continuously monitor for unusual activities and indications of hacking attempts in real time.

• Investigate and manage security incidents that are either detected proactively or reported by third parties, such as internal teams, media, and partners.

• Reduce the operational, media, and regulatory repercussions during incidents.

• Collaborate with privacy, legal, and communications teams based on the nature of the incident.

• Work alongside the Red Team, which simulates attackers to assess response capabilities.

• Streamline and enhance existing incident response processes.

• Operate independently, addressing incidents with available resources, regardless of the technology involved.

⛳️ Requirements

• Demonstrated experience in security incident response (DFIR — Digital Forensics and Incident Response).

• Robust understanding of AWS and cloud environments.

• Generalist profile with the capability to respond to incidents across various technological scenarios.

• Familiarity with operating systems, including Windows, macOS, and Linux.

• Knowledge of network and infrastructure security.

• Proficient in investigating, isolating, and resolving incidents.

• Understanding of Kubernetes and container architecture.

• Experience in application security (AppSec) and vulnerability assessment.

• Familiarity with CI/CD pipelines and security tools (DevSecOps).

• Experience with SIEM, EDR, and SOAR tools.

• Background in working with Red Teams or participating in attack simulation exercises.

• Knowledge of development and automation languages (Python, Go, etc.).

🏝️ Benefits

• Bullet point 1

• Bullet point 2

• Bullet point 3