Especialista em Shuffle SOAR, Cyber Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop, configure, and maintain automation workflows using Shuffle SOAR

• Create and enhance playbooks for automated incident response

• Conduct integrations between Shuffle and security tools such as SIEM, EDR/XDR, Threat Intelligence, firewalls, and ticket management systems

• Create automations for alert enrichment and event investigation

• Support the evolution of SOC response processes

• Perform troubleshooting on integrations, APIs, and connectors

• Develop improvements in incident handling and treatment workflows

• Document workflows, integrations, and technical procedures

• Collaborate with Blue Team, SOC, and Information Security teams

⛳️ Requirements

• Experience with the Shuffle SOAR platform

• Experience in creating security workflows and automations

• Knowledge of SOC processes and incident response

• Experience with tool integrations using REST APIs

• Knowledge in data manipulation using JSON, Webhooks, and REST APIs

• Proficiency in scripting languages for automation: Python, Bash, and PowerShell

• Familiarity with security tools such as SIEM (IBM QRadar, Wazuh, Elastic, Splunk, or similar), EDR/XDR, and Threat Intelligence

• Advantage: experience with implementing and architecting Shuffle SOAR environments

• Advantage: experience in creating playbooks for Phishing, Malware, User Compromise, IP/domain investigation, and Indicator (IOC) enrichment

• Advantage: knowledge of MITRE ATT&CK, Cyber Kill Chain, and Threat Intelligence

• Advantage: experience in 24x7 SOC environments

• Advantage: knowledge of Wazuh and IBM QRadar

🏝️ Benefits

• Structured career plan (semi-annual and/or annual reviews)

• Support for technical courses and certifications

• 100% online medical assistance (telemedicine, specialists, nutrition, and psychology)

• Life insurance

• Accounting support for MEI

• Day off in the month of your birthday

• Paid time off after one year