Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Sicredi

Senior Information Security Analyst – SIEM Focus

Sicredi

. Administer, support, and enhance SIEM platforms, with a primary focus on Splunk.

Posted 11/4/2026full-timePorto Alegre • BrazilSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in administering and enhancing SIEM platforms, particularly Splunk, with a strong focus on data integration, governance, and security practices. Proficient in developing queries, creating use cases, and mapping detections to the MITRE ATT&CK framework.

Highest-signal resume keywords
Splunk Enterprise AdministrationSPL Query DevelopmentData Integration and OnboardingMITRE ATT&CK Framework KnowledgeInformation Security Governance

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
SIEM AdministrationSPL ProgrammingData Source IntegrationSecurity Data GovernanceIncident Response AutomationPython AutomationPowerShell AutomationTechnical DocumentationCorrelation Rule TuningData Quality Practices
Soft Skills
Strong Communication SkillsAnalytical CapabilitiesInvestigative SkillsProactive ApproachProblem-Solving Skills
Tools & Technologies
SplunkSOAR PlatformsEDR/XDR SolutionsIAM SystemsCloud EnvironmentsThreat Intelligence PlatformsSyslogAPIsHECForwarders
Certifications & Qualifications
Splunk CertificationsSplunk Enterprise Security Certification
Industry Keywords
Information SecuritySOC EnvironmentsData RetentionData ClassificationData TraceabilityWindows LogsLinux LogsActive DirectoryFirewallsDNS

Tech Stack

Tools & technologies
CloudDNSLinuxPythonSplunk

About the role

Key responsibilities & impact
  • Administer, support, and enhance SIEM platforms, with a primary focus on Splunk.
  • Perform onboarding and integration of new data sources via Syslog, APIs, HEC, Forwarders, and other mechanisms.
  • Develop and optimize queries using SPL.
  • Create, test, and tune use cases, alerts, and correlation rules.
  • Map detections to the MITRE ATT&CK framework.
  • Support security data governance, including data quality, retention, classification, and traceability.
  • Support integrations between SIEM, SOAR, EDR/XDR, IAM, Cloud, and Threat Intelligence platforms.
  • Create and maintain technical documentation for integrations, data sources, and use cases.

Requirements

What you’ll need
  • Professional experience in Information Security, working with SIEM and SOC environments.
  • Strong experience with Splunk Enterprise, preferably in platform administration and engineering activities.
  • Advanced knowledge of SPL.
  • Experience integrating and onboarding data sources.
  • Knowledge of logs from Windows, Linux, Active Directory/Entra ID, Firewalls, WAF, EDR/XDR, IAM, Proxy, DNS, and Cloud environments.
  • Knowledge of the MITRE ATT&CK framework.
  • Knowledge of data governance and quality practices applied to Information Security.
  • Strong communication and interpersonal skills.
  • Analytical and investigative capabilities.
  • Proactive approach and strong sense of responsibility.
  • Ability to solve complex problems.
  • Splunk-related certifications, especially in platform administration or Splunk Enterprise Security, are desirable.
  • Experience with Splunk Enterprise Security (ES) is desirable.
  • Experience with other SIEM platforms is desirable.
  • Experience with automation using Python, PowerShell, or APIs is desirable.
  • Experience with SOAR and incident response automation is desirable.

Benefits

Comp & perks
  • 14th and 15th fixed annual salary payments
  • Profit-sharing, based on seniority
  • Health and dental insurance with no co-payments
  • Wellness programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, running group, and local gym access
  • Meal and food allowances, with flexible allocation percentages between the food and meal cards and no co-payments
  • Extended maternity and paternity leave
  • Childcare or nanny assistance for children up to 6 years and 11 months old
  • Assistance for employees' children with disabilities, with no age limit
  • Life insurance
  • Private pension plan with contributions of up to 8% of salary
  • Training platform – Sicredi Aprende, offering a wide range of courses
  • 40-hour workweek, using a time-banking system
  • Remote-work allowance, except for positions that are 100% on-site