Information Security Analyst III – Detection Engineering and Automation

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design, enhance, and automate security detections to boost the effectiveness, speed, and quality of identifying threats, suspicious activities, and incidents.

• Create, review, and optimize detection rules, use cases, correlations, and alerts.

• Develop automation processes for enrichment, triage, initial response, and minimizing manual efforts.

• Facilitate threat hunting using hypotheses derived from intelligence, behavior, and the environmental exposure.

• Integrate pertinent log and telemetry sources to enhance detection coverage.

• Evaluate false positives, visibility gaps, and opportunities for improvement in security controls.

• Document use cases, detection logic, playbooks, and response criteria.

• Collaborate with CSIRT, BlueOps, Red Team, IAM, Cloud/Network, and Application Security teams.

⛳️ Requirements

• Proficiency with SIEM, EDR/XDR, NDR, query languages, and log analysis.

• Extensive knowledge of attack techniques and detection engineering.

• Experience with automation, scripting, APIs, or SOAR.

• Familiarity with Windows and Linux environments, networking, identity, cloud, and applications.

• Capability to analyze alerts, events, and telemetry with technical depth.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Renascer Program

• Support for Significant Life Events

• Education Investment Program

• Profit-Sharing Program

• Individual Development Plan

• Private Pension Plan

• Life Insurance

• Time Together Program

• Meal and/or Food Allowance

• Transportation Allowance

• Childcare/Nanny Allowance