Wazuh Specialist, Cybersecurity

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Deploy, configure, and manage the Wazuh platform.

• Develop and refine detection rules, decoders, and event correlations.

• Adjust alerts to minimize false positives.

• Investigate security events and assist in incident analysis.

• Set up Wazuh agents in both Windows and Linux environments.

• Integrate Wazuh with various security tools.

• Aid in the development and enhancement of monitoring use cases.

• Design dashboards to enhance security visibility.

• Resolve issues related to event collection, communication, and processing.

• Maintain documentation for configurations, procedures, and improvements made.

• Assist the SOC team in the operation and advancement of the tool.

⛳️ Requirements

• Extensive experience with Wazuh.

• Background in administering and configuring SIEM environments.

• Proficient in creating and customizing detection rules.

• Experience in log analysis and investigating security events.

• Familiarity with Linux and Windows operating systems.

• Knowledge of JSON, YAML, Regex, and Syslog.

• Experience in investigating alerts and security incidents.

• Understanding of SOC and Blue Team principles.

• Preferred: experience with IBM QRadar, Elastic Stack, Splunk, or Microsoft Sentinel.

• Preferred: knowledge of MITRE ATT&CK, Threat Intelligence, EDR/XDR, and Vulnerability Management.

• Preferred: understanding of networking, firewalls, cloud, and containers.

• Preferred: experience in automation through scripting in Python, Bash, or PowerShell.

🏝️ Benefits

• Defined career path with semi-annual and/or annual reviews.

• Support for training courses and technical certifications.

• Comprehensive online healthcare services (telemedicine, specialists, nutrition, and psychology).

• Life insurance coverage.

• Accounting assistance for micro-entrepreneurs/self-employed individuals.

• Day off during your birthday month.

• Paid time off after one year of employment.