6 дней назад
Senior Security Engineer (CSIRT)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security Engineer (CSIRT) (Incident Response/DFIR): Leading critical security incident response and forensic investigations across a high-availability technology ecosystem with an accent on threat detection, cloud security, and coordinated defense operations. Focus on directing L2/L3 incidents, developing automated response playbooks, analyzing compromise across Windows, Linux, macOS, AWS, and GCP, and converting threat intelligence into actionable security improvements.
Location: Remote-first; must be based in Brazil. The role may also be performed from São Paulo offices or partner coworking spaces up to twice a week.
Company
is a Latin American real estate technology ecosystem developing products and solutions across the housing journey.
What you will do
- Lead technical response to complex Level 2 and Level 3 security incidents in high-criticality environments.
- Coordinate incident handling with MSSPs, the 24/7 SOC, Legal, DPO, Communications, and cyber teams.
- Develop, maintain, and improve incident response playbooks and procedures, including automation.
- Lead digital forensics, root cause analysis, compromise scoping, post-mortems, and recovery activities.
- Improve threat detection rules and tuning across SIEM and EDR platforms.
- Manage vendor relationships and apply cyber threat intelligence to strengthen SOC operations.
Requirements
- At least 5 years of experience in incident response, digital forensics, or threat hunting.
- Strong DFIR capabilities, including preserving, collecting, acquiring, and analyzing evidence from Windows, Linux, macOS, and networks.
- Proficiency with memory forensics and host-based forensics tools.
- Ability to perform basic static and dynamic malware analysis and extract indicators of compromise.
- Experience leading cloud incident response in AWS and GCP, plus building SOAR workloads.
- Ability to make rapid risk-based decisions under pressure and communicate findings to technical and executive audiences.
Culture & Benefits
- Remote-first work model with home office and coworking options in Brazil.
- Competitive salary and profit sharing.
- Health, dental, and life insurance, plus meal and home office allowances.
- Childcare and atypical parenthood subsidies, extended parental leave, and Wellhub.
- Mental, social, legal, and financial assistance program, along with education discounts and other employee benefits.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →