Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Provide support and take full ownership of the Blue Team’s Exposure Management initiative.

• Increase asset coverage, improve assessment frequency, and enhance remediation speed.

• Ensure ongoing visibility into the attack surface, which includes endpoints, cloud environments, identities, APIs, and assets exposed to the internet.

• Utilize CrowdStrike Falcon as the main source for telemetry and security posture information.

• Assess exposures based on real business risks, integrating factors such as exploitability, exposure, criticality, CVSS, EPSS, and CISA KEV.

• Design and implement automation and AI agents for triaging, enriching, correlating, and generating remediation tickets.

• Evaluate access and network posture within SASE architectures, including ZTNA, SWG, and CASB.

• Identify excessively permissive policies and exposure pathways.

• Lead remediation efforts alongside engineering and infrastructure teams, managing priorities, monitoring SLAs, and formalizing exceptions and risk acceptance.

• Validate the exploitability of exposures, supporting penetration tests, bug bounty initiatives, and attack simulations.

• Define and report on program metrics, such as exposure trends, MTTR, and SLA compliance.

• Produce evidence for audits and regulatory compliance.

⛳️ Requirements

• Extensive experience in vulnerability or exposure management within production settings, with ownership of a program or a substantial workstream.

• Practical expertise with the CrowdStrike Falcon platform, particularly its exposure, vulnerability, and posture modules (e.g., Falcon Exposure Management / Spotlight).

• Familiarity with SASE architectures and Zero Trust principles (ZTNA, SWG, CASB) from a posture and risk perspective.

• Proven capability to automate security workflows using scripting and integrations (e.g., Python, APIs, SOAR) and to deploy AI agents in operational tasks.

• Successful history of facilitating remediation with engineering teams without formal authority, leveraging data and risk-based prioritization.

• Understanding of cloud security (AWS, GCP) and identity as a potential exposure vector.

• Preferred: experience in fintech, payments, or regulated environments (PCI DSS, BACEN, LGPD).

• Preferred: relevant industry certifications (e.g., CrowdStrike CCFA/CCFR, OSCP, CISSP, cloud certifications).

🏝️ Benefits

• Competitive salary that aligns with market standards.

• Remote work flexibility — no matter where you are, you are part of the team!

• Monthly home office allowance provided through the RecargaPay app.

• Comprehensive health and dental insurance with no copay required.

• Life insurance coverage.

• Flexible meal allowance (via Flash).

• TotalPass to support your health and wellness.

• An inclusive and diverse workplace where you are encouraged to be yourself.

• Opportunities for consideration in other roles within the RecargaPay Group.