Security Operations

• Identify, analyze, and resolve issues in client environments
• Perform troubleshooting and monitor incidents through to resolution
• Support clients, answer questions, present analyses, and provide guidance on remediation
• Contribute to the continuous improvement of SOC processes and tools

SOC Analyst N2/N3

• Lead operational triage, analysis, and prioritization of complex security events across multi-tenant client environments
• Serve as Incident Commander during critical security events, following NIST SP 800-61r2 for containment, eradication, and recovery
• Lead threat hunting and detection engineering using MITRE ATT&CK, Sigma, and YARA
• Ensure incident notifications and responses meet contractual SLAs and regulatory reporting timelines
• Develop production-grade Python, Node.js, or Go code to extend the MSSP application backend
• Build third-party integrations for EDR, DNS security, threat intelligence, spam/phishing, identity management, firewall, and IDS telemetry
• Design and build SOAR orchestration playbooks for dynamic triage, identity enrichment, and automated tenant isolation
• Implement LLM-driven alert summarization and enrichment pipelines using Gemini, BigQuery SIEM data, REST webhooks, RAG pipelines, and MCP servers
• Optimize detection pipelines with machine learning and AI filters to reduce false positives
• Align security monitoring with NIST CSF 2.0, ISO/IEC 27001:2022, and NIST SP 800-53r5
• Ensure incident response and telemetry collection adhere to GDPR, Brazil LGPD, and US state privacy laws

Lead Security Operations Analyst

• Monitor, triage, and enrich low-, medium-, and high-complexity security alerts generated by the SIEM
• Analyze logs from ZTNA, EDR/XDR, cloud environments, databases, DLP, WAF, and CSPM
• Conduct detailed analyses of security alerts and events, correlating multiple indicators before concluding investigations
• Investigate and respond to cyber incidents, proposing corrective and preventive actions
• Manage ticket workflows, ensuring proper logging, tracking, and escalation when necessary
• Develop, review, and improve playbooks, runbooks, and standard operating procedures (SOPs)
• Provide structured feedback to Detection Engineering on required use cases and rule tuning
• Identify monitoring gaps and propose new SIEM use cases based on MITRE ATT&CK, relevant TTPs, critical assets, and emerging threats
• Contribute to Cyber Threat Intelligence (CTI) and Threat Hunting activities
• Drive continuous SOC improvement through automation and process optimization
• Produce technical and management reports on security status and handled incidents
• Support compliance with PCI DSS, ISO 27001, Brazil’s LGPD, and BACEN regulations
• Support internal audits by providing evidence and technical documentation

Mid-Level SOC Analyst – Evening Shift

• Design, maintain, and govern a hybrid Log Analytics Workspace environment, ensuring strict isolation of the PCI environment through granular RBAC
• Translate audit requirements into use cases in Microsoft Sentinel
• Create automated reports (Workbooks)
• Ensure log retention and immutability
• Develop and maintain complex playbooks in Azure Logic Apps
• Consume APIs for autonomous response actions, including machine isolation and account blocking
• Version detection rules, playbooks, and infrastructure (IaC) integrated with CI/CD pipeline tools
• Lead monthly threat-hunting campaigns using cross-workspace queries with advanced KQL
• Configure multi-vendor connectors
• Optimize ingestion and retention costs in Azure

Security/SecOps Analyst – SIEM/Sentinel

• Own execution of real estate portfolio strategy across the assigned international region
• Direct site-level real estate activities, including transactions, space planning, design and construction delivery, and facilities operations
• Implement footprint strategies, including expansion, consolidation, and optimization initiatives
• Monitor regional market conditions and provide insights for portfolio decisions and risk management
• Partner with Country Managers and regional business leaders to align real estate and security solutions with business priorities
• Act as the key escalation point for regional issues
• Lead delivery through brokers, construction project managers, facilities management providers, and security vendors
• Establish and enforce vendor performance standards, SLAs, and governance frameworks
• Drive continuous improvement in vendor performance and delivery outcomes
• Oversee corporate security execution, physical security measures, vendor oversight, and incident response coordination
• Support regional risk assessments and implement mitigation strategies
• Coordinate with the Corporate Security Center of Excellence on standards, intelligence, and crisis response
• Ensure compliance with local, national, and international regulations
• Track and report regional performance metrics, including cost, delivery timelines, and service quality
• Provide senior leadership with updates on portfolio performance, risks, and opportunities
• Partner with Global Real Estate and Corporate Security Centers of Excellence on standards, governance, reporting, and global initiatives
• Lead and develop a regional team of real estate, facilities, and/or security professionals
• Collaborate with global functional leaders and contribute to international leadership strategy, planning, and governance

Security Operations jobs in Brazil

SOC Analyst N2/N3

Lead Security Operations Analyst

Mid-Level SOC Analyst – Evening Shift

Security/SecOps Analyst – SIEM/Sentinel

Regional Lead – Real Estate, Corporate Security Operations