Senior Cybersecurity Analyst, CTI, Threat Hunting, SIEM, Cloud Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Execute Cyber Threat Intelligence (CTI) initiatives, generating threat assessments, IOCs, TTPs, and strategic reports.

• Carry out advanced Threat Hunting activities within corporate settings.

• Design, implement, and oversee use cases, correlations, and dashboards within SIEM platforms.

• Perform security incident analysis and assist in incident response operations.

• Create automations using Python, PowerShell, and other scripting languages.

• Contribute to the design and advancement of security controls for Linux, Windows, and cloud environments.

• Engage in the implementation and integration of security solutions, from gathering requirements to guided operation.

• Support efforts related to cybersecurity architecture and strategy.

• Collaborate with infrastructure, cloud, development, and operations teams.

• Prepare technical documentation, operational procedures, and executive reports.

• Lead intricate technical deliveries and assist in security project management.

⛳️ Requirements

• A technically self-sufficient professional with leadership in security initiatives, active participation in strategic decision-making, and experience in leading complex cybersecurity projects and implementations.

• Extensive experience in Cyber Security Operations (SecOps).

• Proven experience with Cyber Threat Intelligence (CTI) solutions.

• Practical experience in Threat Hunting.

• In-depth knowledge of SIEM platforms (Microsoft Sentinel, Splunk, QRadar, Elastic, ArcSight, or similar).

• Experience in investigating security events and incidents.

• Familiarity with frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST SP 800-61, ISO/IEC 27001, IEC 62443, and ISO/IEC 27035.

• Significant experience with Linux environments.

• Advanced understanding of networking, TCP/IP protocols, DNS, HTTP/HTTPS, and network security.

• Experience in operating system hardening and log analysis.

• Proficient in scripting and development using Python, PowerShell, and Bash/Shell.

• Experience in automating processes and integrating security tools.

• Familiarity with cloud environments such as Microsoft Azure and AWS.

• Experience with Google Cloud is a plus.

• Knowledge of security controls for workloads, identities, networks, and cloud services.

• Experience delivering end-to-end security projects.

• Background in project management and coordination.

• Experience with SOAR and the automation of incident response.

• Familiarity with EDR/XDR solutions (Microsoft Defender, CrowdStrike, SentinelOne, Cortex, among others).

• Experience in DevSecOps environments.

• Knowledge of malware analysis and reverse engineering.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health and wellness programs.

• Opportunities for professional development and training.

• Flexible work environment and remote work options.

• A collaborative and innovation-driven workplace culture.