FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Information Security Analyst – Blue Team
Banco ABC BrasilSenior Incident Response Analyst for ABC Brazil Bank. Leading cyber threat investigations and enhancing security measures with solid experience in information security.
Tech Stack
Tools & technologiesCloudDNSLinuxPythonTCP/IP
About the role
Key responsibilities & impact- Lead security incident response, including triage, analysis, containment, eradication, and recovery
- Conduct forensic investigations on endpoints, networks, and cloud environments
- Analyze alerts from SIEM, EDR, NDR and other security tools
- Perform root cause analysis and recommend corrective actions
- Develop and refine incident response playbooks and procedures
- Coordinate actions with internal teams (SOC, infrastructure, development) and external stakeholders when necessary
- Produce technical and executive reports on incidents and identified risks
- Support simulation exercises (tabletop and red/blue/purple team)
- Ensure compliance with regulatory and industry requirements for the financial sector
- Contribute to continuous improvement of processes, tools, and detection capabilities
- Develop an incident response plan proposing corrective and preventive actions
- Create a vulnerability/weakness map to support implementation of corrective and mitigation measures
- Administer and configure security tools such as EDR, SIEM/SOAR (Google SecOps is a plus) and EDR (CrowdStrike is a plus), as well as SASE (Netskope is a plus), in addition to PROXY, ZTNA, WAF, DLP, CSPM, Mobile & Email Protection
- Enhance current cyber defense intelligence for perimeter security, endpoints, cloud, and critical applications
- Build cyber defense models (playbooks, use cases, tuning of configurations, etc.)
- Define and update work instructions and technical information security procedures
- Develop a technical knowledge base for use by the Cyber Operations team
- Define operational indicators for visual management and trend analysis
- Support security information solutions: Capacity Planning, Optimizations and Roadmap Control
Requirements
What you’ll need- Availability to work the 2:00 PM – 11:00 PM shift
- Solid experience in Information Security with a focus on Incident Response (DFIR)
- Hands-on experience investigating complex incidents (malware, ransomware, APTs, credential compromise, etc.)
- Advanced knowledge of log analysis, event correlation, and network traffic analysis
- Experience with tools such as SIEM (e.g., Google SecOps, QRadar), EDR/XDR (e.g., CrowdStrike, Defender), and forensic solutions
- Knowledge of Windows and Linux operating systems
- Strong understanding of networking concepts (TCP/IP, DNS, HTTP/S, etc.)
- Familiarity with frameworks such as MITRE ATT&CK and incident response best practices
- Experience with scripting languages (Python, PowerShell, or Bash)
- Technical English for reading and communication
- University degree in Information Security, Computer Science, Computer Engineering or related fields
- Proven experience in information security, cybersecurity or related areas, preferably in financial institutions
- Knowledge of security frameworks and methodologies (NIST, CIS Controls, OWASP, etc.)
- Experience in incident response, forensic analysis and threat hunting
- Ability to configure and manage security tools
- Certifications such as CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor are a plus
- Good communication and teamwork skills
Benefits
Comp & perks- Health insurance
- Dental care (Omint)
- Life insurance
- Profit sharing (PLR)
- Performance-based bonus (PPR)
- "ABC with You": a program that supports employees and their families with legal, social, psychological and financial assistance
- Meal voucher
- Grocery voucher
- Extended parental leave: 20 days for paternity and 6 months for maternity
- Childcare/Nanny allowance
- Annual day off
- Home office allowance
- Home office infrastructure allowance
- TotalPass
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
incident responseforensic investigationsroot cause analysislog analysisevent correlationnetwork traffic analysisscripting languagesvulnerability mappingcyber defense modelstechnical knowledge base
Soft Skills
communicationteamworkcoordinationreportingcontinuous improvementproblem-solvinganalytical thinkingadaptabilityleadershiporganizational skills
Certifications
CISSPCISMCEHISO 27001 Lead ImplementerISO 27001 Auditor