ISH Tecnologia

Security Engineer

• Lead the technical deployment, management and optimization of network security solutions (NGFW, WAF, IPS, NAC). Configure, manage and maintain Firewall (NGFW) solutions, including security policies, VPNs (IPsec and SSL), Web Filtering and Application Control.
• Manage high-impact change processes, ensuring the security and stability of client environments.
• Interact directly with clients during critical situations, organizing and executing joint troubleshooting sessions / war rooms with client teams (and vendors when applicable) to accelerate incident resolution.
• Act as an escalation point for activities, supporting junior and mid-level teams in incidents and performing troubleshooting across multi-vendor equipment.
• Produce technical reference documentation and security architectures, defining standards and best practices for the team.
• Mentor junior and mid-level analysts, sharing knowledge and promoting the technical development of the team.

Network Cybersecurity Analyst

• Realizar novas implementações disponíveis na solução OneTrust;
• Aplicar melhorias;
• Atendimento a demandas do cliente;
• Monitoramento da aplicação OneTrust;
• Suporte em mudanças e novas configurações;
• Apoio em auditorias;
• Apoio na resposta aos titulares na ferramenta OneTrust;
• Elaborar relatórios e indicadores.

Especialista em Privacidade

• Develop policies aligned with risk mapping;
• Communicate newly identified risks to the team and managers;
• Participate in and propose improvements to Project Planning and Service Transition processes;
• Perform technical evaluations of Information Security solutions;
• Prepare and present technical reports on evaluation, execution, implementation, or activation of services and technologies;
• Address and discuss technical matters with clients during project execution;
• Participate in training to improve technical skills across different technologies, products, and services.

Information Security Consultant – Outsourcing

• Conduct penetration tests (internal and external) in corporate environments, web applications, APIs, networks, operating systems and cloud infrastructure.
• Plan, execute and document simulated offensive campaigns (Red Team Operations), focusing on defense evasion, lateral movement, persistence and data exfiltration.
• Develop and apply adversary simulation techniques, based on frameworks such as MITRE ATT&CK, APT TTPs and other threat intelligence sources.
• Use and customize offensive tools such as Cobalt Strike, Metasploit, Empire, Sliver, BloodHound, Burp Suite, among others.
• Identify vulnerabilities, misconfigurations and potential attack vectors that could be exploited by malicious actors.
• Prepare technical and executive reports with findings, evidence and mitigation recommendations.
• Work closely with Blue Team, SOC and Vulnerability Management teams, supporting Purple Team exercises and improving the organization’s defenses.
• Continuously stay updated on new attack techniques, tools, exploits and threat landscape trends.

Pentest Analyst

• Configure, manage and maintain Firewall solutions (NGFW), including security policies, VPNs (IPsec and SSL), Web Filter and Application Control.
• Troubleshoot security incidents and connectivity issues related to the network perimeter.
• Analyze security logs and alerts to identify and respond to potential threats.
• Actively participate in the change management process, ensuring the secure implementation of new rules and configurations.
• Create and maintain technical documentation for the managed environments.
• Collaborate with internal teams and interact with clients to resolve tickets and provide specialized technical support.

Network Analyst – Network Security

• Act as the primary technical reference for SOC operations, supporting N1 and N2 analysts in conducting security investigations.
• Perform advanced technical analysis of complex incidents, including root cause identification, impact assessment, and attack vector determination.
• Correlate events from multiple sources (SIEM, EDR/XDR, network logs, system logs and other security tools) to build threat scenarios.
• Provide technical guidance on containment, mitigation, and incident response actions.
• Ensure the technical quality of analyses performed by the SOC, reviewing investigations when necessary.
• Ensure adherence to the defined processes, procedures and playbooks for the operation.
• Identify opportunities to improve detection mechanisms and support the creation and evolution of correlation rules in the SIEM.
• Work to reduce false positives and increase the SOC’s operational efficiency.
• Propose and implement continuous improvements to operational processes, playbooks and runbooks.
• Collaborate with Security Engineering and DFIR teams to evolve detection and response capabilities.
• Provide technical support for the analysis of relevant incidents to management (supervisors and managers).
• Promote sharing of technical knowledge and best practices within the team.
• Document relevant technical analyses and contribute to the evolution of the operation’s documentation.
• Support the preparation of technical reports on security incidents.

Network Cybersecurity Analyst

Especialista em Privacidade

Information Security Consultant – Outsourcing

Pentest Analyst

Network Analyst – Network Security

Cyber Defense Technical Lead