Security/SecOps Analyst – SIEM/Sentinel

Kryptus SA

. Design, maintain, and govern a hybrid Log Analytics Workspace environment, ensuring strict isolation of the PCI environment through granular RBAC .

Posted 9/21/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Microsoft Sentinel architecture and administration, with advanced proficiency in KQL for security monitoring and compliance. Skilled in Infrastructure as Code (IaC) and automation workflows, ensuring effective log management and cost optimization in cloud environments.

Highest-signal resume keywords

Microsoft Sentinel AdministrationAdvanced KQL ProficiencyInfrastructure as Code (IaC)PCI DSS Compliance KnowledgeMicrosoft Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Log Analytics Workspace DesignAutomated Reporting (Workbooks)Complex Playbook DevelopmentAPI ConsumptionCross-Workspace Queries

Tools & Technologies

Azure Logic AppsCI/CD Pipeline ToolsMulti-Vendor Connectors

Certifications & Qualifications

Microsoft Security Certifications (SC-200, SC-100)

Industry Keywords

PCI DSS ComplianceFinOps PracticesMITRE ATT&CKSecurity Monitoring

Tech Stack

Tools & technologies

Azure

About the role

Key responsibilities & impact

Design, maintain, and govern a hybrid Log Analytics Workspace environment, ensuring strict isolation of the PCI environment through granular RBAC
Translate audit requirements into use cases in Microsoft Sentinel
Create automated reports (Workbooks)
Ensure log retention and immutability
Develop and maintain complex playbooks in Azure Logic Apps
Consume APIs for autonomous response actions, including machine isolation and account blocking
Version detection rules, playbooks, and infrastructure (IaC) integrated with CI/CD pipeline tools
Lead monthly threat-hunting campaigns using cross-workspace queries with advanced KQL
Configure multi-vendor connectors
Optimize ingestion and retention costs in Azure

Requirements

What you’ll need

Bachelor’s degree in Information Technology or a relevant postgraduate qualification in Information Security
Strong experience with Microsoft Sentinel (SIEM/SOAR) architecture and administration, as well as Azure Log Analytics
Advanced proficiency in KQL (Kusto Query Language) for complex and cross-workspace rules
Practical knowledge of PCI DSS compliance applied to security monitoring
Experience with Infrastructure as Code (IaC) and advanced automation workflows, including API consumption and orchestration
Official Microsoft Security certifications (e.g., SC-200 or SC-100) preferred
Proficiency in tactical mapping using MITRE ATT&CK for the financial services/acquiring sector preferred
Practical knowledge of Microsoft’s ASIM normalization model preferred
Experience with FinOps practices for cloud cost optimization preferred

Benefits

Comp & perks

Profit-sharing bonus (PLR)
Health insurance
Dental insurance
Attractive benefits package, including meal and food allowances, among others
Transportation allowance
TotalPass
Day off (your day, your way)
Sesc partnership
Extended maternity and paternity leave
Mental health platform (therapy)
Highly skilled technical team
Low bureaucracy and high impact
Freedom with accountability
Diversity, respect, and creativity valued
Opportunities to grow and contribute to strategic technical decisions
Regular happy hours
Relaxation and social space
A variety of food and beverages available every day, with no limits
Regular feedback
Collaborative environment that respects diversity, minimizes bureaucracy, and consistently encourages creativity and professional growth