Managed Detection and Response Analyst

This is a fully remote position, open to applicants in Brazil, +3 more countries.

📋 Description

• Analyze incoming EDR/XDR incidents, conducting precise triage and severity evaluation

• Implement remediation measures such as workload isolation in line with established playbooks

• Record investigation procedures and maintain comprehensive case documentation

• Partner with AI engineering to test and enhance automated triage and response methodologies

• Take ownership of incidents from detection to resolution, with support from senior staff as needed

• Assist in the development and enhancement of documentation, automation, and incident-correlation logic

• Engage with customers via email and phone regarding the status of incidents and recommendations

• Stay updated on current security threats and attacker methodologies

• Adhere to a 5-day/8-hour work schedule during office hours, including rotational weekend coverage

⛳️ Requirements

• Experience in SOC, MDR, or IT security operations

• Strong comprehension of EDR/XDR operations and security incident workflows

• Deep understanding of common attacker tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework

• Knowledge of Windows OS, Active Directory, Linux, and networking

• Familiarity with log analysis using tools like Kibana or through manual reviews

• Experience with security solutions, including EDR, SIEM, and SOAR

• Interest in automation technologies

• Capability to adhere to structured processes and accurately document findings

• A growth-oriented mindset

• Excellent communication skills and attention to detail

• Proficient English written and verbal communication skills (B2 level or higher)

• Resume and application must be submitted in English

• Successful completion of relevant criminal, education, and identity background checks

🏝️ Benefits

• Opportunities for professional development and contributions to proactive threat hunting and advanced incident response

• Opportunities to participate in ongoing service improvement, documentation, automation, and incident correlation logic

• Equal opportunity employment

• Global, rapidly growing work environment

• Genuine, real-time interview process focused on individual skills and communication

• Employment offer contingent upon successful criminal, education, and identity background checks