IT Security Operations Specialist – SecOps

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Act as a technical authority within the Security Operations Management (SecOps) team, offering leadership for intricate projects.

• Establish cybersecurity protection standards, architectures, and strategies.

• Assist teams in implementing industry best practices.

• Collaborate closely with the first line of defense and coordinate with Security Architecture/CoE and the second line of defense (CISO).

• Participate in security architecture, standards definition, strategic projects, complex risk assessments, specialized technical consulting, and technological progress.

• Systematically take in project handovers and technological advancements from the second line of defense and Architecture.

• Provide technical leadership for strategic security initiatives, outlining enterprise architectures and cybersecurity protection standards.

• Evaluate technology risks related to new initiatives and act as an internal consultant on complex issues.

• Encourage innovation and the integration of new protection technologies by developing strategies for technological advancement and maturity.

• Impact enterprise security decisions by maintaining baselines, hardening (CIS Benchmarks), and addressing vulnerabilities identified through Red Team/White Team testing.

• Offer technical guidance to analysts and coordinators in IAM/PAM, cloud security, data protection, detection and response, and AI Security.

• Represent the organization in interactions with vendors, auditors, and specialized technical forums.

• Ensure compliance with relevant standards, policies, and regulatory requirements (CMN Resolution No. 5,274, BACEN, and LGPD).

• Assist in root cause analysis of significant incidents and in devising solutions for highly complex issues.

• Contribute to the generation of technical evidence and the resolution of findings from internal and external audits and regulatory bodies.

• May take on the Coordinator role as the team grows.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Engineering, or a related discipline.

• Extensive technical experience in Information Security and Cybersecurity, acting as a subject-matter expert in one or more SecOps domains.

• Experience in large-scale enterprise settings; experience in financial services is a considerable advantage.

• Strong technical skills with security technologies: IAM/PAM/MFA, EDR/XDR, SSE, Cloud Security, ITDR, data protection, and SIEM/SOAR integrations.

• Experience in vulnerability management, hardening (CIS Benchmarks), incident response, and security architecture.

• Proficient in industry frameworks: NIST CSF 2.0, CIS Benchmarks, and MITRE ATT&CK.

• Understanding of the relevant regulatory framework: BACEN, CMN Resolution No. 5,274, and LGPD.

• Strong technical communication and influencing abilities, with a proven track record of leading projects and establishing standards.

• Advanced technical certifications preferred: CISSP, OSCP, GIAC (GCIH/GCIA/GPEN), CCSP, and platform certifications (e.g., CyberArk, CrowdStrike, public cloud).

🏝️ Benefits

• 14th and 15th fixed annual salary payments.

• Profit-sharing (based on seniority).

• Health and dental insurance with no co-payment required.

• Well-being programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, a running group, and access to a local gym.

• Food and meal allowances, with flexibility to allocate a percentage between food and meal cards, with no co-payment.

• Extended maternity and paternity leave.

• Childcare or nanny allowance for children up to 6 years and 11 months old.

• Allowance for children with disabilities, with no age limit.

• Life insurance coverage.

• Private pension plan with employer contributions of up to 8% of salary.

• Access to a training platform — Sicredi Aprende — offering a wide variety of courses.

• 40-hour workweek utilizing a time-banking system.

• Work-from-home allowance (with the exception of positions that are 100% on-site).