Security Engineer – Blue Team

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee security incidents from start to finish: triage, containment, eradication, recovery, communication with stakeholders, and post-incident analysis.

• Take ownership of and enhance the incident response process, which includes playbooks, severity models, on-call practices, and conducting tabletop exercises with engineering and IT teams.

• Develop and refine detections within Datadog Cloud SIEM across AWS, Kubernetes, and Google Workspace to minimize detection time and reduce alert noise.

• Examine suspicious activities in cloud, identity, and workload logs while gathering and safeguarding evidence for subsequent investigation.

• Strengthen the cloud security posture, including Identity and Access Management (IAM), by transforming findings into prioritized tasks for engineering squads.

• Automate detection and response processes using Python and Terraform.

• Provide incident and security posture reports to engineering leadership.

• Mentor engineers across various squads.

• Collaborate with the current Blue Team engineer and engineering squads in both product and platform engineering to identify threats early, respond swiftly, and ensure applications and infrastructure remain safe and compliant.

⛳️ Requirements

• A minimum of 5 years of experience in Blue team/Defensive security/Security operations.

• Practical experience leading security incident responses, from detection to post-incident reviews and action follow-ups.

• Proficient in forensics and evidence management within cloud environments, including log analysis and evidence collection and preservation.

• Experience in building and fine-tuning SIEM detections and alerts, such as those in Datadog Cloud SIEM, aligned with MITRE ATT&CK, CIS, or NIST frameworks.

• Knowledge in securing AWS and Kubernetes, including reviews and remediation of AWS IAM and SSO permissions.

• Expertise in automating security operations using Python and/or Bash, and managing infrastructure as code with Terraform.

• Proven experience in defining security processes, leading cross-team initiatives, and mentoring engineers.

• Proficiency in English for daily interactions with native speakers.

• Successful completion of electronic background checks contingent upon the job offer.

🏝️ Benefits

• Competitive base salaries.

• Highly competitive equity package.

• Unlimited Paid Time Off (PTO) and sick days.