Senior Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Engage in proactive threat hunting within cloud and hybrid environments.

• Detect gaps in log coverage.

• Execute internal vulnerability assessments and penetration tests.

• Suggest system hardening measures and patching strategies.

• Develop internal security tools and automated testing workflows utilizing Python or Bash.

• Analyze complex logs and enhance forensic data collection processes.

• Integrate security APIs effectively.

• Carry out security reviews and audits of AWS cloud infrastructures.

• Serve as the primary investigator for intricate security incidents.

• Refine ElasticSearch SIEM alerts to reduce false positives.

• Address root-cause security issues and bolster infrastructure resilience and security posture.

• Act as a subject matter expert for junior and mid-level analysts.

• Create training materials and facilitate tabletop exercises.

• Offer technical support to enhance team preparedness.

• Collaborate with and mentor global SOC team members located in the US, UK, and Brazil.

⛳️ Requirements

• Experience in Security Operations (SOC), Information Security, or a comparable technical role.

• Demonstrated success in active threat hunting, incident investigation, and developing or enhancing SOC operational components rather than just triaging alerts.

• Strong practical skills in Python or Bash for log parsing, forensic data collection, and custom security tool creation.

• Practical experience securing cloud infrastructures, particularly with AWS.

• Proficiency in navigating Linux command-line interfaces.

• Extensive knowledge and hands-on experience in configuring and customizing ElasticSearch SIEM for log collection and alert tuning.

• Proficient in technical English, both written and spoken.

• Personable communication style characterized by genuine engagement, a willingness to share personal insights, and a spirit of collaboration.

• Preferred: Experience in Capture The Flag (CTF) competitions, ethical hacking, or red/blue team testing.

• Preferred: Personal GitHub repositories or contributions to open-source security projects.

• Preferred: Familiarity with multi-cloud environments (Azure or GCP).

• Preferred: Relevant industry certifications or a degree in Information Security / Computer Science.

• Resume must be submitted in English.

• An applicant assessment and background check may be included in the hiring process.

🏝️ Benefits

• Company-wide bonuses tied to monthly sales performance.

• Employee referral bonuses.

• Adoption assistance.

• Tuition reimbursement.

• Certification reimbursement.

• Bonuses for certification completion.

• A modern, high-tech, and enjoyable work environment.