Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop, manage, and enhance SIEM/XDR capabilities, encompassing log ingestion, detection rules, alert tuning, and investigation workflows.

• Create detection strategies for identifying suspicious activities and data exfiltration utilizing application and database telemetry.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry.

• Investigate and address security incidents within cloud infrastructure and applications.

• Conduct root cause analysis and implement long-term solutions.

• Execute proactive threat hunting across cloud and identity domains.

• Establish repeatable agentic threat-hunting processes.

• Manage vulnerability oversight across infrastructure, platforms, and applications.

• Assess and validate external security findings, including bug bounty submissions.

• Contribute to threat modeling and participate in security design evaluations.

• Leverage AWS and Kubernetes expertise to secure systems and guide teams on remediation efforts.

• Implement controls that align with PCI DSS, SOC 2, and other compliance standards.

• Develop automation, including AI, for security operations, detection, and response activities.

• Take part in the on-call rotation for detection and response as well as owned services.

• Report to the Director of Information Security and work collaboratively with security platform, network, and zero-trust engineers.

⛳️ Requirements

• Over 6 years of experience in security, software, or infrastructure engineering.

• Practical experience in securing cloud-based production systems.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Experience in designing and fine-tuning detection rules, minimizing alert noise, and enhancing investigation workflows.

• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• In-depth knowledge of AWS, Linux, and Kubernetes infrastructure.

• Capability to investigate issues using logs, cloud tools, and system-level data.

• Experience evaluating detection and logging implications during design reviews.

• Understanding of common security vulnerabilities and mitigation techniques, including OWASP and SANS guidelines.

• Familiarity with PCI DSS and SOC 2 compliance frameworks.

• Proven experience in AI-driven engineering utilizing AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

🏝️ Benefits

• Competitive gross salary ranging from $5,000 to $9,500 USD per month.

• AI-supported engineering workflows.

• Opportunity for remote work within Brazil.

• Involvement in the on-call rotation.