Senior Cybersecurity Analyst – Blue Team

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee the EDR platform comprehensively, including the establishment of blocking/prevention policies, exception governance, environmental coverage, and optimization to minimize false positives.

• Act as the senior escalation point within the SOC and manage the incident lifecycle following NIST SP 800-61 guidelines.

• Perform triage, containment, root cause analysis, digital investigations/forensics, and post-incident reviews to derive lessons learned.

• Assist with insider threat investigations and work in collaboration with Legal, Privacy/LGPD, and Risk teams on critical cases or formal risk acceptance procedures.

• Establish mitigation strategies and security baselines for both endpoints and cloud environments.

• Prioritize findings from penetration testing, bug bounty programs, and continuous vulnerability scans.

• Transform IOCs and TTPs into prevention and blocking rules as well as new security controls.

• Evaluate the security implications associated with the release of new software, extensions, plugins, and AI tools.

• Create playbooks and standard operating procedures to guide operations.

• Automate routine tasks, track team performance metrics, and mentor junior analysts.

⛳️ Requirements

• Significant experience in managing EDR/XDR within a corporate setting, including the configuration of behavior-based prevention policies, tuning detections, and exception governance.

• Proven experience in security incident response, overseeing cases from inception to resolution.

• Capability to investigate endpoint activities utilizing EDR telemetry and correlate observed behaviors with MITRE ATT&CK techniques.

• Extensive knowledge of defense strategies and hardening measures for Windows, Linux, and macOS operating systems.

• Experience in vulnerability management, including prioritizing vulnerabilities based on severity, active exploitation, and asset criticality, as well as coordinating remediation efforts with other teams.

• Familiarity with NIST SP 800-61, NIST CSF, ISO 27001/27002, CIS Controls, and CIS Benchmarks.

• Experience leading Blue Team process enhancement initiatives, including the incorporation of automation and AI in operational security practices.

• Strong technical writing abilities, along with the capability to mentor analysts and effectively communicate with both technical and non-technical stakeholders.

• Relevant certifications such as CompTIA Security+ or equivalent are advantageous.

• Familiarity with EDR/XDR platforms such as SentinelOne, CrowdStrike Falcon, or Microsoft Defender for Endpoint is desirable.

• Knowledge of Jamf Pro, ManageEngine Endpoint Central, Intune, or Kandji is a plus.

• Experience with cloud vulnerability and attack surface management tools such as Wiz, Tenable, Qualys, or Rapid7, and an understanding of AWS is beneficial.

• Familiarity with Threat Intelligence platforms like Axur, Tempest, Recorded Future, or MISP is an advantage.

• Knowledge of digital forensics is a plus.

• Experience with DLP, traffic, and data protection solutions such as Netskope, Zscaler, Palo Alto Prisma Access, or Microsoft Purview is advantageous.

• Understanding of LGPD and Bacen regulatory requirements relevant to incidents is beneficial.

• Experience in automating workflows using n8n and AI nodes is a plus.

• Proficiency in English for effective communication with vendors is desirable.

🏝️ Benefits

• Comprehensive medical and dental insurance with no copayment required.

• Life insurance coverage.

• Assistance with prescription medications.

• Fitness and wellness allowance.

• Four complimentary therapy or nutritionist sessions each month.

• Quick massage services available at the headquarters.

• Flexible meal benefits provided through a Visa card.

• Complimentary meals available at the headquarters.

• Childcare assistance offered.

• Parental support programs available.

• Extended maternity and paternity leave policies.

• Access to an in-house training platform.

• Education assistance that covers 70% of tuition for undergraduate and language courses, in addition to funding for courses and books.

• Home office allowance provided.

• Provision of work equipment.

• Home office furniture allowance.

• Partnership with WOBA to offer access to coworking spaces throughout Brazil.

• A day off during the birthday month.

• Budget for happy hour gatherings.

• Referral bonuses for recommending new hires.

• Annual performance-based bonuses.

• Stock options plan available.

• No strict dress code policy.