Senior Security Analyst - SOC/CTI (Fintech)

Location: Curitiba, Brazil — on-site

Company

hirify.global is a global fintech and payments platform connecting digital businesses with customers across 21 high-growth markets.

What you will do

• Lead threat detection, monitoring, triage, incident response, and forensic investigations across SIEM, EDR/XDR, and cloud-native security tools.
• Produce and operationalize cyber threat intelligence on threat actors, TTPs, malware families, and campaigns targeting fintech and payment infrastructure.
• Lead intelligence-driven threat hunting across on-premises and AWS and Azure cloud environments.
• Develop and tune detection rules, correlation logic, and threat models to reduce dwell time and false positives.
• Assess vulnerabilities and CVEs against the attack surface, prioritize remediation, and coordinate with IT and development teams.
• Support PCI-DSS, ISO 27001, LGPD, and other security audits while producing technical and executive-level intelligence reports.

Requirements

• Hands-on L2/L3 SOC experience in incident handling, threat detection, and security monitoring across on-premises and cloud environments.
• Proven cyber threat intelligence experience, including threat actor tracking, malware and campaign analysis, and actionable intelligence reporting.
• Deep knowledge of MITRE ATT&CK, adversary profiling, TTP mapping, threat modeling, and ATT&CK Navigator.
• Experience conducting structured threat-hunting missions with behavioral analytics and custom queries such as KQL or SPL.
• Strong proficiency with SIEM, EDR/XDR, threat intelligence platforms, sandbox environments, and cloud-native security tools.
• Advanced English required for producing and presenting intelligence to technical and executive audiences; at least one required certification must be held: GIAC GCTI, GIAC GCIH, GIAC GCIA, CompTIA CySA+, or eCTHP.

Nice to have

• Experience with fintech or payments threat landscapes, fraud patterns, and payment infrastructure threats.
• Experience with PCI-DSS, ISO 27001, and SOC 2 governed environments.
• Additional certifications such as GIAC GCED, CHFI, eCDFP, BTL2, AWS Certified Security — Specialty, or Azure Security Engineer Associate.
• Experience with MISP, OpenCTI, YARA, or Sigma rules.

Culture & Benefits

• Annual performance bonus based on company results.
• Monthly meal allowance and medical and dental plans with dependent coverage.
• Financial assistance for undergraduate, graduate, and MBA programs.
• Budget for courses, certifications, and workshops, plus language classes.
• Semi-flexible hours, a birthday day off, year-end break, and well-being programs.