Security Analyst

. Analyze, investigate, and respond to security incidents escalated by the SOC, conducting advanced triage, containment, eradication, and recovery .

Posted 10/15/2026full-timeBelo Horizonte • BrazilSeniorWebsite

Tools & technologies

CloudDNSFirewallsLinuxPythonTCP/IP

Key responsibilities & impact

Analyze, investigate, and respond to security incidents escalated by the SOC, conducting advanced triage, containment, eradication, and recovery
Analyze logs, network traffic, and endpoint behavior to identify IOCs and TTPs using SIEM
Conduct investigations using EDR, WAF, and IDS, documenting evidence and preparing technical and executive reports
Consider vulnerability management information and DLP alerts when prioritizing responses
Monitor data and asset exposure across open sources and external attack surfaces
Handle identity and access incidents, including account compromise, anomalous access, MFA, and conditional access policies
Collaborate with infrastructure, network, and cloud teams on incidents involving Windows, Linux, workstations, firewalls, and network access controls
Serve as the SOC’s technical escalation point, providing guidance on containment and validating classifications
Create and maintain playbooks, runbooks, and incident response procedures
Contribute to improving detection rules, event correlation, and security policies
Support audits, tabletop exercises, and information security awareness initiatives
Respond to critical incidents outside business hours when necessary

What you’ll need

Strong senior-level experience in a SOC, CSIRT, or related incident response and security monitoring functions
Advanced knowledge of malware analysis, digital forensics, and incident response methodologies such as NIST and SANS
Familiarity with MITRE ATT&CK and the Cyber Kill Chain
Hands-on experience with or knowledge of SIEM, EDR/XDR, SASE/secure remote access, next-generation firewalls, vulnerability management, threat intelligence and external exposure, DLP, IAM, WAF, IDS, NAC, multicloud environments, and Windows/Linux
Knowledge of TCP/IP, DNS, HTTP/S, VPNs, and network security concepts
Experience working with SOC teams, guiding escalations, and validating alerts
Strong analytical and investigative reasoning skills, with close attention to detail
Strong written and verbal communication skills for preparing technical reports
Technical English proficiency for reading documentation and threat intelligence
Availability to respond to critical incidents outside business hours
Certifications such as CompTIA Security+, CySA+, GCIH, GCFA, eCIR, CEH, or equivalent are a plus
Knowledge of SOAR is a plus
Scripting experience with Python, PowerShell, or Bash is a plus

Comp & perks

Meal or food allowance
Discounts on courses, universities, and language schools
Stefanini Academy — a platform offering free, up-to-date online courses with certificates
Mentoring
Discount club for medical consultations and examinations
Health insurance
Dental insurance
Benefits and discounts at leading establishments
Travel club
Pet insurance and services partnership