FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing EDR/XDR platforms, incident response, and vulnerability management while effectively collaborating with cross-functional teams. Proficient in developing security policies, conducting digital investigations, and automating security processes.
Highest-signal resume keywords
EDR/XDR ManagementIncident ResponseVulnerability ManagementNIST SP 800-61 KnowledgeTechnical Writing Skills
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Behavior-Based Prevention PoliciesDigital InvestigationRoot Cause AnalysisEndpoint Activity InvestigationSecurity Baselines DefinitionMitigation StrategiesAutomation of Security ProcessesTTP MappingVulnerability PrioritizationDigital Forensics
Soft Skills
MentoringEffective Communication
Tools & Technologies
SentinelOneCrowdStrike FalconMicrosoft Defender for EndpointJamf ProManageEngine Endpoint CentralIntuneWizTenableQualysNetskope
Certifications & Qualifications
CompTIA Security+
Industry Keywords
NIST CSFISO 27001CIS ControlsCIS BenchmarksLGPDBacen Regulatory RequirementsThreat Intelligence PlatformsDLP SolutionsAI in SecurityIncident Lifecycle Management
Tech Stack
Tools & technologiesAWSCloudJamfLinuxMacOS
About the role
Key responsibilities & impact- Manage the EDR platform end to end, including blocking/prevention policies, exception governance, environment coverage, and tuning to reduce false positives
- Serve as the SOC’s senior escalation point and lead the incident lifecycle based on NIST SP 800-61
- Conduct triage, containment, root cause analysis, digital investigation/forensics, and post-incident reviews/lessons learned
- Support insider threat investigations and collaborate with Legal, Privacy/LGPD, and Risk teams on critical cases or formal risk acceptance
- Define mitigation strategies and security baselines for endpoints and cloud environments
- Prioritize findings from penetration tests, bug bounty programs, and continuous scans
- Convert IOCs and TTPs into prevention and blocking rules and new security controls
- Assess the security implications of releasing new software, extensions, plugins, and AI tools
- Develop playbooks and standard operating procedures
- Automate routine tasks, monitor team metrics, and mentor less experienced analysts
Requirements
What you’ll need- Strong experience managing EDR/XDR in a corporate environment, including configuring behavior-based prevention policies, tuning detections, and governing exceptions
- Strong experience in security incident response, managing cases from start to finish
- Ability to investigate endpoint activity using EDR telemetry and map observed behavior to MITRE ATT&CK techniques
- In-depth knowledge of defense and hardening for Windows, Linux, and macOS
- Experience in vulnerability management, prioritizing vulnerabilities based on severity, active exploitation, and asset criticality, and tracking remediation with other teams
- Knowledge of NIST SP 800-61, NIST CSF, ISO 27001/27002, CIS Controls, and CIS Benchmarks
- Experience leading Blue Team process improvement projects, including automation and the use of AI in operational security routines
- Strong technical writing skills and the ability to mentor analysts and communicate effectively with technical and non-technical teams
- Certifications such as CompTIA Security+ or equivalent are a plus
- Experience with EDR/XDR platforms such as SentinelOne, CrowdStrike Falcon, or Microsoft Defender for Endpoint is a plus
- Experience with Jamf Pro, ManageEngine Endpoint Central, Intune, or Kandji is a plus
- Experience with cloud vulnerability and attack surface management tools such as Wiz, Tenable, Qualys, or Rapid7, along with AWS knowledge, is a plus
- Experience with Threat Intelligence platforms such as Axur, Tempest, Recorded Future, or MISP is a plus
- Knowledge of digital forensics is a plus
- Experience with DLP and traffic and data protection solutions such as Netskope, Zscaler, Palo Alto Prisma Access, or Microsoft Purview is a plus
- Knowledge of LGPD and Bacen regulatory requirements applicable to incidents is a plus
- Experience automating workflows with n8n and AI nodes is a plus
- English proficiency for communicating with vendors is a plus
Benefits
Comp & perks- Medical and dental insurance with no copay
- Life insurance
- Prescription medication assistance
- Fitness and wellness allowance
- Four free therapy or nutritionist sessions per month
- Quick massage at the headquarters
- Flexible meal benefit on a Visa card
- Free food at the headquarters
- Childcare assistance
- Parental support program
- Extended maternity and paternity leave
- In-house training platform
- Education assistance covering 70% of undergraduate and language course tuition, as well as courses and books
- Home office allowance
- Work equipment
- Home office furniture allowance
- Partnership with WOBA for access to coworking spaces throughout Brazil
- Birthday month day off
- Happy hour allowance
- Referral bonus for recommending new employees
- Annual performance-based bonus
- Stock options plan
- No dress code