ISH Tecnologia

Security Engineer

• Perform hunting activities in OT environments;
• Analyze logs and data to identify threats;
• Develop and implement hunting tools and techniques;
• Train and mentor other members of the security team on how to conduct hunting.
• Examples of activities a Hunting analyst working with OT may perform:
• Monitor logs and data from OT systems to identify suspicious activity;
• Develop and implement hunting tools and techniques to detect threats in OT systems;
• Train and guide other security team members on how to perform hunting in OT systems.

Information Security Specialist – OT, Threat Back

• Conduzir tecnicamente a implantação, gestão e otimização de soluções de segurança de rede (NGFW, WAF, IPS, NAC).
• Configurar, gerenciar e manter soluções de Firewall (NGFW), incluindo políticas de segurança, VPNs (IPsec e SSL), Web Filter e Application Control.
• Conduzir a gestão de mudanças de alto impacto, garantindo a segurança e a estabilidade dos ambientes dos clientes.
• Interagir diretamente com clientes em interações críticas, organizando e executando sessões de troubleshooting conjunto / war rooms com as equipes do cliente (quando cabível, fabricante) para acelerar a resolução de falhas.
• Atuar como ponto de escalonamento de atividades, apoiando equipes de níveis júnior e pleno em incidentes e realizando troubleshooting em equipamentos de múltiplos vendors.
• Elaborar documentação técnica de referência e arquiteturas de segurança, definindo padrões e boas práticas para a equipe.
• Mentorar analistas de níveis júnior e pleno, compartilhando conhecimento e promovendo o desenvolvimento técnico do time.

Analista de Cibersegurança de Redes – Noturno

Procurement

• Monitor security events using SIEM solutions, with a focus on Splunk.
• Analyze alerts, identify false positives, and conduct initial investigations.
• Support and perform security incident response activities.
• Participate in crisis rooms (incident war rooms), providing technical analysis and decision-support.
• Serve as the local point of contact for the global Information Security team.
• Participate in technical and operational meetings conducted in English.
• Ensure adherence to global processes, policies, and standards.
• Support the rollout and implementation of corporate security tools and controls.
• Support the operation and analysis of the following security solutions:
• Firewall (FW)
• Web Application Firewall (WAF)
• Endpoint Detection and Response (EDR)
• Data Loss Prevention (DLP)
• Work closely with infrastructure, networking, and cloud teams.
• Support vulnerability lifecycle management, including:
• Identification
• Risk analysis
• Tracking remediation plans
• Collaborate with project teams to ensure the adoption of Security by Design practices from the early stages.

Information Security Analyst

• Create policies aligned with risk mapping;
• Communicate newly identified risks to the team and managers;
• Participate in and propose improvements for Project Planning and Service Transition activities;
• Perform technical evaluations of Information Security solutions;
• Prepare and present technical reports on the evaluation, execution, implementation, or activation of services and technologies;
• Engage with clients to address and discuss technical matters during project execution;
• Participate in training to enhance technical skills across different technologies, products, and services.

Information Security Consultant

• Administer and monitor Identity and Access Management (IAM) systems in cloud environments, ensuring compliance with security and privacy policies;
• Configure, maintain and improve access policies, roles, groups and permissions on cloud platforms such as AAD, AWS and GCP;
• Collaborate with development and infrastructure teams to implement secure access control solutions;
• Conduct periodic security audits and analyses, identifying and mitigating potential access management vulnerabilities;
• Actively participate in the resolution of cloud-related IAM security incidents;
• Provide specialized technical support to internal teams, addressing questions and assisting with access management issues in the cloud.

Access Management Specialist – Cyber Identity

Analyst

• Create capacity, availability, and performance alerts;
• Create custom Low-Level Monitoring (LLM) items using JavaScript;
• Create and maintain Templates;
• Perform troubleshooting and configuration adjustments;
• Add and remove assets from monitoring;
• Ensure monitoring is functional and reliable;
• Install and update monitoring tools;
• Create reports and viewers from monitoring solutions;
• Daily follow-up on identified issues;
• Create and maintain Triggers and Actions;
• Resolve technical support incidents (troubleshooting) of low, medium, and high complexity;
• Implement and track monitoring projects.

Zabbix, Grafana – Monitoring Analyst

• Conduzir testes de intrusão (internos e externos) em ambientes corporativos, aplicações web, APIs, redes, sistemas operacionais e infraestrutura em nuvem.
• Planejar, executar e documentar campanhas ofensivas simuladas (Red Team Operations), com foco em evasão de defesas, movimentação lateral, persistência e exfiltração de dados.
• Desenvolver e aplicar técnicas de adversary simulation, baseando-se em frameworks como MITRE ATT&CK, TTPs de APTs e outras fontes de threat intelligence.
• Utilizar e customizar ferramentas ofensivas como Cobalt Strike, Metasploit, Empire, Sliver, BloodHound, Burp Suite, entre outras.
• Identificar vulnerabilidades, falhas de configuração e possíveis vetores de ataque que possam ser explorados por agentes maliciosos.
• Elaborar relatórios técnicos e executivos com achados, evidências e recomendações para mitigação.
• Trabalhar em conjunto com times de Blue Team, SOC e Gestão de Vulnerabilidades, apoiando exercícios de Purple Team e melhorando as defesas da organização.
• Atualizar-se constantemente sobre novas técnicas de ataque, ferramentas, exploits e tendências do cenário de ameaças.

Analista de Ciberexploração – Pentest

• Define investigation lines during incidents and support clients with containment, remediation and recovery strategies for compromised environments;
• Operate and provide advanced support for EPP, EDR, XDR and encryption tools;
• Control and maintain the asset inventory (hardware, software, systems);
• Create rules and playbooks in endpoint security tools;
• Monitor and manage cybersecurity process maturity;
• Draft and review organizational Controls, Policies, Standards and Procedures with a focus on Information Security;
• Collaborate with the development team to improve products, processes and automations;
• Respond to requests;
• Support the incident response process;
• Prepare analysis reports and root cause analysis (RCA).

Cybersecurity Analyst, Endpoint Security

• Define investigation paths during incidents and assist clients with containment, remediation, and recovery strategies for compromised environments;
• Advanced operation and support of EPP, EDR, XDR, and encryption tools;
• Control and maintenance of asset inventory (hardware, software, systems);
• Creation of rules and playbooks in endpoint security tools;
• Assess and monitor the maturity of cybersecurity processes;
• Develop and review organizational controls, policies, standards, and procedures with a focus on Information Security;
• Collaborate with development teams to evolve products, processes, and automations;
• Handle incoming requests;
• Support the incident response process;
• Prepare analysis reports and root cause analyses (RCA).

• Maintain SIEM services, ensuring availability, performance and data quality;
• Work autonomously to resolve complex issues related to detection, correlation and source integrations;
• Develop, customize, tune and optimize parsers and connectors, ensuring proper normalization and adherence to the data dictionary;
• Perform advanced parser construction and normalization, including log structure analysis, regular expressions (regex), field extraction and enrichment;
• Manage patches, updates and upgrades, assessing impacts on production environments;
• Perform advanced troubleshooting for ingestion failures, parsing issues, pipelines and integrations;
• Prepare RCAs (Root Cause Analysis) for outages or degradations of medium complexity;
• Participate in internal and external audits, providing technical evidence, documentation and log traceability;
• Participate in technical meetings with internal and external clients, supporting discussions on architecture, integration and improvements;
• Provide technical training and mentorship for junior analysts and technicians;
• Continuously participate in technical training, keeping up with new technologies, products and services that add value to SIEM Engineering.

SIEM Analyst – Support

Account Executive

• Responsible for sales support to clients, acting as a liaison for problem resolution, contract negotiation and preparation of proposals;
• Conduct client visits;
• Develop new opportunities in Information Security, IT Infrastructure and Cloud within the GOV market;
• Organize alignment meetings to qualify and understand clients' environments (in-person and online);
• Manage the full commercial cycle and maintain client relationships;
• Prospect new clients and qualify business opportunities;
• Build and manage a portfolio of mid-to-large enterprise clients;
• Present products/services tailored to client needs, participate in solution design and proposal development, and support commercial negotiations;
• Create Account Plans for your portfolio to drive increased sales and revenue;
• Maintain and build relationships within client organizations (IT/Security/Procurement/Business);
• Keep activity and client records up to date in the CRM.

Information Security Specialist – OT, Threat Back

Analista de Cibersegurança de Redes – Noturno

Information Security Analyst

Information Security Consultant

Access Management Specialist – Cyber Identity

Zabbix, Grafana – Monitoring Analyst

Analista de Ciberexploração – Pentest

Cybersecurity Analyst, Endpoint Security

Cybersecurity Analyst, Endpoint Security

SIEM Analyst – Support

Account Executive – Government