Information Security Analyst – Splunk

. Administer, monitor, and maintain Splunk and Microsoft Sentinel environments .

Posted 9/25/2026full-timeBarueri • BrazilMid-LevelSeniorWebsite

Tools & technologies

CloudPythonSplunk

Key responsibilities & impact

Administer, monitor, and maintain Splunk and Microsoft Sentinel environments
Integrate new log sources into the SIEM and ensure the quality of ingested data
Develop, review, and optimize detection rules and use cases
Identify and troubleshoot log ingestion failures
Tune alerts, helping reduce false positives
Support the investigation and analysis of security incidents at N1/N2 levels
Perform Threat Hunting activities as needed
Document rules, integrations, procedures, and implemented improvements
Support the development of SOC coverage and efficiency metrics
Work collaboratively with Infrastructure, Network, Cloud, IAM, Threat Intelligence, and Incident Response teams

What you’ll need

Experience with Splunk and Microsoft Sentinel
Experience operating and administering SIEM platforms
Experience integrating, analyzing, and troubleshooting log sources
Experience developing and tuning rules and use cases
Experience analyzing and investigating security events
Experience in SOC operations and incident response
Splunk Core Certified Power User and/or Splunk Enterprise Certified Admin certifications are a plus
Microsoft SC-200 certification is a plus
Knowledge of SOAR is a plus
Experience with automation using Python and/or PowerShell is a plus
Experience with MISP is a plus
Knowledge of Microsoft Defender XDR, CrowdStrike, or other EDR/XDR solutions is a plus
Knowledge of Sigma is a plus
Familiarity with the NIST CSF, NIST 800-61, CIS Controls, and ISO 27001 is a plus

Comp & perks