Senior SOC Analyst

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Identify, evaluate, and mitigate cyber risks and vulnerabilities to ensure the protection of the company's assets.

• Manage the SIEM platform by developing, tuning, and enhancing correlation rules and use cases, while defining severity and criticality levels for prioritization and response.

• Integrate new data sources into the SIEM, including maintenance, normalization/parsing of logs, and integrations with both internal and external systems.

• Conduct and oversee continuous monitoring of security events and incidents using SIEM, SOAR, EDR/XDR, and other related solutions.

• Engage in threat hunting activities to proactively identify suspicious behaviors and potential threats.

• Collaborate with Threat Intelligence (both production and consumption of CTI), integrate with TIPs (such as MISP), and automate IOCs.

• Lead investigations and incident response efforts for cyber incidents, proposing corrective and preventive measures.

• Develop and review operational documentation, as well as incident response playbooks and workflows.

• Support and monitor security tests (penetration tests) and track remediation efforts.

• Ensure compliance with standards and regulations (PCI-DSS, ISO 27001, SOC 2, Central Bank regulations), assisting in internal and external audits.

• Prepare technical and management reports on security status and incidents managed, recommending continuous enhancements.

• Participate in incident simulation exercises including tabletop, red team, blue team, and purple team activities.

• Promote ongoing improvement of SOC processes, workflows, and overall maturity.

• Collaborate with internal teams to advance information security practices.

• Mentor and train team members, advocating for information security best practices.

⛳️ Requirements

• Extensive experience in SOC environments, particularly in managing complex security incidents.

• Strong critical thinking abilities, attention to detail, and excellent analytical skills.

• An investigative mindset coupled with a sense of urgency in identifying and addressing threats.

• Previous experience in financial institutions or other highly regulated environments.

• Advanced knowledge of monitoring and incident response tools (SIEM, SOAR, IDS/IPS, EDR/XDR).

• Thorough understanding of security frameworks and standards (ISO 27001, PCI-DSS, NIST, MITRE ATT&CK, CIS Controls, OWASP).

• Proficiency in scripting and automation (Python, PowerShell, or similar) to enhance and automate security processes.

• Experience in implementing and managing cybersecurity controls.

• Strong communication skills for effective interaction with both technical and non-technical stakeholders.

🏝️ Benefits

• Medical and dental plans with no copayment.

• Life insurance.

• Medication purchase allowance.

• Fitness allowance.

• Partnership with Neon for the team’s financial wellness.

• Partnership with Zenklub for physical and mental health (includes 4 free monthly sessions with a therapist or nutritionist).

• Quick massage services available at headquarters.

• Flexible meal benefit via a credit card (Visa).

• Free meals at headquarters.

• Childcare assistance.

• Parental support program.

• Extended maternity and paternity leave.

• In-house training platform.

• Education assistance covering 70% of tuition for degrees and language courses, plus support for purchasing courses and books.

• Home office allowance.

• Work equipment provided.

• Furniture allowance.

• Partnership with WOBA for coworking access across Brazil.

• Day off during the month of your birthday.

• Happy hour allowance.

• Referral bonus for new hires.

• Performance bonus based on annual targets.

• Stock option plan.

• Casual work environment with no dress code.