Senior IT Security Engineer – Incident Response

Keep IT Simple

. Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for security incident management activities .

Posted 11/12/2026contractRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates strong expertise in cybersecurity incident response, including incident coordination, digital forensics, and security operations. Proficient in managing the incident lifecycle and communicating effectively with technical and executive stakeholders.

Highest-signal resume keywords

Cybersecurity Incident ResponseDigital ForensicsSIEM PlatformsIncident CoordinationThreat Intelligence

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ManagementEvidence HandlingLog AnalysisProgramming in PythonPowerShell ScriptingWindows AdministrationLinux AdministrationCloud Security (AWS, Azure)Network SecuritySecurity Risk Management

Soft Skills

Analytical ThinkingProblem-SolvingDecision-MakingCollaborationCommunication

Tools & Technologies

Security Operations PlatformsEmail SystemsTicketing SystemsVirtualization ToolsAI-Enabled Security Tools

Industry Keywords

Incident TriagePost-Incident ReviewChain of CustodyOperational WorkflowsEnterprise Security Governance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsLinuxPythonUnix

About the role

Key responsibilities & impact

Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for security incident management activities
Coordinate incident triage, containment, eradication, recovery, escalation, and post-incident review for events affecting Americas IT assets
Manage the regional incident lifecycle from detection through closure, ensuring alignment with global processes and addressing regional operational gaps
Maintain timely, clear, and consistent communication with technical teams, regional stakeholders, senior management, and executive audiences
Develop a detailed understanding of regional organizations, business units, technology environments, operational workflows, risks, and dependencies
Handle digital evidence in a forensically sound manner, preserving chain of custody, integrity, and documentation standards
Perform security analysis and digital forensics across Windows, Linux or UNIX, cloud, network, email, endpoint, and enterprise environments
Analyze alerts, logs, threat intelligence, tickets, and reports from multiple sources, including SIEM and security operations platforms
Prepare investigation findings, incident briefings, risk assessments, and post-incident reports for technical and non-technical audiences
Monitor AI-enabled attack techniques and defensive capabilities, including deepfakes, automated phishing, adversarial machine learning, response automation, and AI-assisted threat intelligence
Contribute to incident response playbooks, runbooks, standard operating procedures, tooling, and service improvement initiatives
Mentor junior incident responders and share expertise across the regional security organization

Requirements

What you’ll need

Strong expertise in cybersecurity incident response, security operations, incident coordination, containment, recovery, and post-incident analysis
Hands-on knowledge of digital forensics, evidence handling, chain of custody, log analysis, threat intelligence, and investigative documentation
Experience with SIEM platforms, security monitoring tools, email and ticketing systems, and enterprise security operations workflows
Broad knowledge of Windows, Linux or UNIX, directory services, AWS, Azure, mobile device management, virtualization, networks, web servers, databases, and firewalls
Proficiency in at least one programming or scripting language, such as Python, PowerShell, or Bash
Understanding of security control development, security operations, security risk management, and enterprise security governance
Familiarity with AI and machine learning concepts as they relate to cybersecurity threats, detection, response automation, and defensive technologies
Strong analytical thinking, problem-solving, prioritization, and decision-making skills during high-impact incidents
Excellent written and verbal communication skills, including the ability to brief senior management and executive stakeholders
Ability to collaborate effectively across organizational, cultural, and geographic boundaries
Fluent English, both written and spoken
Proven experience collaborating with international and multicultural teams
8+ years of professional experience in Information Technology, including at least 6 years in cybersecurity, incident response, security operations, or a closely related discipline
Demonstrated experience managing and coordinating security incidents in a matrixed, global, or multi-region organization
Experience working with or alongside a centralized Security Operations Center or Cyber Defense Center
Experience supporting incident response across multiple countries or regions, preferably within the Americas
Experience communicating incident status, risk, business impact, and remediation actions to senior and executive stakeholders
Bachelor's degree in Information Security, Computer Science, Information Systems, Business Administration, or a related field, or equivalent specialized training and professional experience

Benefits

Comp & perks

100% remote working model
PJ (Pessoa Jurídica) contracting model
Schedule flexibility
Participation in incident response activities outside standard business hours may occasionally be required for major security incidents or critical events