ISH Tecnologia

Analyst

• Create capacity, availability, and performance alerts;
• Create custom Low-Level Monitoring (LLM) items using JavaScript;
• Create and maintain Templates;
• Perform troubleshooting and configuration adjustments;
• Add and remove assets from monitoring;
• Ensure monitoring is functional and reliable;
• Install and update monitoring tools;
• Create reports and viewers from monitoring solutions;
• Daily follow-up on identified issues;
• Create and maintain Triggers and Actions;
• Resolve technical support incidents (troubleshooting) of low, medium, and high complexity;
• Implement and track monitoring projects.

Zabbix, Grafana – Monitoring Analyst

Security Engineer

• Conduzir testes de intrusão (internos e externos) em ambientes corporativos, aplicações web, APIs, redes, sistemas operacionais e infraestrutura em nuvem.
• Planejar, executar e documentar campanhas ofensivas simuladas (Red Team Operations), com foco em evasão de defesas, movimentação lateral, persistência e exfiltração de dados.
• Desenvolver e aplicar técnicas de adversary simulation, baseando-se em frameworks como MITRE ATT&CK, TTPs de APTs e outras fontes de threat intelligence.
• Utilizar e customizar ferramentas ofensivas como Cobalt Strike, Metasploit, Empire, Sliver, BloodHound, Burp Suite, entre outras.
• Identificar vulnerabilidades, falhas de configuração e possíveis vetores de ataque que possam ser explorados por agentes maliciosos.
• Elaborar relatórios técnicos e executivos com achados, evidências e recomendações para mitigação.
• Trabalhar em conjunto com times de Blue Team, SOC e Gestão de Vulnerabilidades, apoiando exercícios de Purple Team e melhorando as defesas da organização.
• Atualizar-se constantemente sobre novas técnicas de ataque, ferramentas, exploits e tendências do cenário de ameaças.

Analista de Ciberexploração – Pentest

• Define investigation lines during incidents and support clients with containment, remediation and recovery strategies for compromised environments;
• Operate and provide advanced support for EPP, EDR, XDR and encryption tools;
• Control and maintain the asset inventory (hardware, software, systems);
• Create rules and playbooks in endpoint security tools;
• Monitor and manage cybersecurity process maturity;
• Draft and review organizational Controls, Policies, Standards and Procedures with a focus on Information Security;
• Collaborate with the development team to improve products, processes and automations;
• Respond to requests;
• Support the incident response process;
• Prepare analysis reports and root cause analysis (RCA).

Cybersecurity Analyst, Endpoint Security

• Define investigation paths during incidents and assist clients with containment, remediation, and recovery strategies for compromised environments;
• Advanced operation and support of EPP, EDR, XDR, and encryption tools;
• Control and maintenance of asset inventory (hardware, software, systems);
• Creation of rules and playbooks in endpoint security tools;
• Assess and monitor the maturity of cybersecurity processes;
• Develop and review organizational controls, policies, standards, and procedures with a focus on Information Security;
• Collaborate with development teams to evolve products, processes, and automations;
• Handle incoming requests;
• Support the incident response process;
• Prepare analysis reports and root cause analyses (RCA).

• Maintain SIEM services, ensuring availability, performance and data quality;
• Work autonomously to resolve complex issues related to detection, correlation and source integrations;
• Develop, customize, tune and optimize parsers and connectors, ensuring proper normalization and adherence to the data dictionary;
• Perform advanced parser construction and normalization, including log structure analysis, regular expressions (regex), field extraction and enrichment;
• Manage patches, updates and upgrades, assessing impacts on production environments;
• Perform advanced troubleshooting for ingestion failures, parsing issues, pipelines and integrations;
• Prepare RCAs (Root Cause Analysis) for outages or degradations of medium complexity;
• Participate in internal and external audits, providing technical evidence, documentation and log traceability;
• Participate in technical meetings with internal and external clients, supporting discussions on architecture, integration and improvements;
• Provide technical training and mentorship for junior analysts and technicians;
• Continuously participate in technical training, keeping up with new technologies, products and services that add value to SIEM Engineering.

SIEM Analyst – Support

Account Executive

• Responsible for sales support to clients, acting as a liaison for problem resolution, contract negotiation and preparation of proposals;
• Conduct client visits;
• Develop new opportunities in Information Security, IT Infrastructure and Cloud within the GOV market;
• Organize alignment meetings to qualify and understand clients' environments (in-person and online);
• Manage the full commercial cycle and maintain client relationships;
• Prospect new clients and qualify business opportunities;
• Build and manage a portfolio of mid-to-large enterprise clients;
• Present products/services tailored to client needs, participate in solution design and proposal development, and support commercial negotiations;
• Create Account Plans for your portfolio to drive increased sales and revenue;
• Maintain and build relationships within client organizations (IT/Security/Procurement/Business);
• Keep activity and client records up to date in the CRM.

Account Executive – Government

• Estruturar exercícios baseados em técnicas do MITRE ATT&CK.
• Mapear cenários de ataque vs. defesas existentes.
• Trabalhar com Red e Blue para definir objetivos, regras e expectativas do exercício.
• Executar ataques controlados, como phishing, movimentação lateral, execução remota, coleta de credenciais, etc.
• Replicar táticas, técnicas e procedimentos (TTPs) de grupos APT reais.
• Criar automações ou scripts para reproduzir ataques complexos.
• Identificar gaps e coletar evidências de falhas de detecção e prevenção.
• Trabalhar com equipes especialistas para ajustes finos ou criação de novas políticas.
• Avaliar a qualidade das detecções (alertas, regras, correlações).
• Criar ou atualizar regras de detecção (KQL, Sigma, YARA, etc.).
• Ajudar a melhorar processos de resposta e contenção.
• Ajudar na construção de cadeias de ataque realistas.
• Garantir que o Red Team utilize técnicas alinhadas ao ambiente e aos objetivos do exercício.
• Documentar:
• Técnicas detectadas
• Lacunas de detecção
• Cobertura atual vs. cobertura esperada
• Criar matrizes de cobertura (heatmaps) para a organização.
• Criar playbooks de resposta para os casos de uso desenvolvidos durante as pesquisas e exercícios de Purple.
• Mapear como o Blue Team deve agir diante de novas técnicas detectadas.
• Documentar cenários completos de ataque e defesa.
• Consumir e aplicar informações de inteligência para:
• Atualizar TTPs dos exercícios
• Modelar ameaças relevantes ao setor
• Identificar novas superfícies e vetores de ataque
• Fazer o link entre inteligência estratégica e operacional.
• Criar Relatórios Técnicos e Executivos
• Criar pesquisas relacionadas as técnicas utilizadas por grupos ofensores por segmento de atuação.
• Comunicar resultados tanto para áreas técnicas quanto para gestão.
• Criar um ciclo permanente de: Simulação de ataque / Avaliação de detecção / Correção das defesas Novo teste
• Promover integração entre equipes de segurança.

Analista Ciberdefesa – Purple Team

• Collaborate with the technical support team to troubleshoot network connectivity issues;
• Configure network devices such as firewalls and access points (APs);
• Perform network and network asset troubleshooting;
• Backup and restore configurations of network devices such as APs and firewalls;
• Monitor hosts and network performance to identify potential connectivity issues;
• Activate and test internet links;
• Open tickets with internet service providers;
• Record and document network incidents and resolutions as well as routine procedures;
• Assist with equipment management.

Network Security Analyst – Network Security

Full-stack Engineer

• Contribute to the definition and maintenance of system design and architecture standards
• Work on both the server-side and client-side of products as a member of the Enterprise Architecture team
• Implement complex backends and APIs as well as frontends, prioritizing readability, refactoring, clean code and programming best practices
• Perform technical, functional and non-functional analyses of high-complexity solutions
• Promote reduction of technical debt and encourage code reuse across products
• Produce necessary application documentation
• Help build a performant and secure operational infrastructure
• Make technical decisions in alignment with the team, clients and stakeholders
• Install, configure and update environments and tools
• Identify, report and fix issues that could compromise deliveries
• Support, when needed, the design and implementation of the User Experience, actively collaborating with the Product Design team
• Apply Agile development best practices, collaborating with Technical Leadership
• Apply Secure Development best practices, collaborating with Technical Leadership
• Adopt scalable development approaches when possible, with reusable code libraries
• Work collaboratively with the team to coordinate activities and ensure product deliveries meet deadlines and the highest quality
• Plan project resources together with the Delivery (development) teams
• Review, validate, test and appropriately document your own code and that of others involved
• Ensure code reviews for other developers, looking for bugs, optimization opportunities and ways to make everyone’s work more efficient
• Continuously seek ways to make your own and the team’s work faster, safer and easier
• Actively participate in the process of defining and refining development efforts
• Be responsible for your own organization, using your soft skills to help teams function harmoniously
• Support and actively participate in improving DevOps processes
• Mentor less-experienced developers, contributing to the professional growth of the team.

Full-Stack Developer

Consultant

• Implement Privileged Access Management (PAM) systems;
• Support client and project team engagement, from deployment through testing and acceptance, across concurrent projects;
• Create and document blueprints, build backlogs and ensure artifact integrity;
• Participate in kickoff, closing, daily and other ceremonies;
• Configure PAM tools such as CyberArk;
• Provide technical support to the team for specific questions, share best practices, and deliver training and enablement related to PAM solutions.

Cyber Identity Consultant, CyberArk – Identity & Risk

• Structure exercises based on MITRE ATT&CK techniques.
• Map attack scenarios against existing defenses.
• Work with Red and Blue teams to define objectives, rules, and expectations for exercises.
• Execute controlled attacks such as phishing, lateral movement, remote execution, credential harvesting, etc.
• Reproduce tactics, techniques, and procedures (TTPs) used by real APT groups.
• Create automations or scripts to reproduce complex attacks.
• Identify gaps and collect evidence of detection and prevention failures.
• Work with specialist teams to fine-tune or create new policies.
• Evaluate the quality of detections (alerts, rules, correlations).
• Create or update detection rules (KQL, Sigma, YARA, etc.).
• Help improve response and containment processes.
• Assist in building realistic attack chains.
• Ensure the Red Team uses techniques aligned with the environment and exercise objectives.
• Document:
• Detected techniques
• Detection gaps
• Current coverage vs. expected coverage
• Create coverage matrices (heatmaps) for the organization.
• Create response playbooks for use cases developed during Purple research and exercises.
• Map how the Blue Team should act when new techniques are detected.
• Document complete attack and defense scenarios.
• Consume and apply intelligence information to:
• Update exercise TTPs
• Model threats relevant to the industry
• Identify new attack surfaces and vectors
• Link strategic and operational intelligence.
• Produce Technical and Executive Reports.
• Conduct research related to techniques used by offensive groups by industry segment.
• Communicate results to both technical teams and management.
• Create a continuous cycle of: attack simulation / detection assessment / defense remediation / new test.
• Promote integration between security teams.

Cyber Defense Analyst – Purple Team

Financial Planning and Analysis

• Atuar nas áreas de contas a pagar, receber, cobrança, preparar e consolidar dados gerenciais e econômico-financeiros;
• Elaborar e analisar fluxo de caixa, tanto diário como mensal;
• Monitorar e analisar as operações financeiras, tanto captações quanto aplicações;
• Construir modelagens financeiras para subsidiar a tomada de decisão;
• Elaboração mensal de reportes gerenciais sobre o desempenho da companhia;
• Responsável pelo fechamento contábil mensal relativo aos temas de tesouraria;
• Acompanhamento dos Covenants e prestação de contas com credores;
• Abrir relacionamento bancário com instituições financeiras;
• Efetuar conciliação bancária;
• Relatar as entidades financeiras a situação dos produtos e serviços bancários;
• Lançar movimento financeiro (tarifas, rendimentos);
• Propor melhorias nos processos e atividades diárias;

Analista Financeiro

Security Analyst

• Operate, monitor, and administer Vulnerability Management tools such as Tenable, Qualys, and other related solutions;
• Perform regular vulnerability scans and review the results, proposing corrective and mitigating actions;
• Implement and monitor security controls focused on Vulnerability Management, ensuring compliance with best practices and applicable standards;
• Develop and review routines and procedures related to Vulnerability Management and Information Security;
• Prepare technical and management reports on the status of vulnerabilities and the mitigation actions taken;
• Collaborate with internal teams;
• Participate in audits and compliance assessments, providing evidence and information related to Vulnerability Management.

Information Security Analyst – Vulnerability Management

• Prevent and mitigate malicious cyber actions, whether intentional or not;
• Monitor, analyze, and assess network events and system anomalies within a SOC environment;
• Analyze, create, and tune alerts generated by security solutions (SIEM, IPS, Firewall, and others);
• Create, follow, and execute security playbooks for triage, classification, and escalation of alerts;
• Collaborate with Level 2 and senior analysts in investigating threats and security incidents;
• Work with an investigative and curious mindset, aiming to understand the root cause of analyzed events;
• Use security tools to detect, prevent, and mitigate intrusions;
• Handle incidents, requests, problems, and changes related to solutions managed by the SOC;
• Prepare analytical and operational reports;
• Support the development, monitoring, and maintenance of security KPIs.

Blue Team Analyst

• Administrar e solucionar incidentes em ambientes de segurança de redes em uma ou mais das soluções a seguir: Firewalls, WAF, NAC, IPS, Wi-Fi, Switching & Routing;
• Implementar e gerenciar políticas de segurança e controle de acesso em diversas plataformas;
• Realizar troubleshooting, investigando falhas e garantindo a continuidade dos serviços;
• Monitorar e otimizar o desempenho de redes e sistemas de segurança;
• Trabalhar com times multidisciplinares para aprimorar a infraestrutura e a proteção contra ameaças cibernéticas;
• Criar e manter documentações técnicas, procedimentos operacionais e relatórios de conformidade;
• Apoiar projetos de implementação e migração de soluções de segurança de redes.

Zabbix, Grafana – Monitoring Analyst

Analista de Ciberexploração – Pentest

Cybersecurity Analyst, Endpoint Security

Cybersecurity Analyst, Endpoint Security

SIEM Analyst – Support

Account Executive – Government

Analista Ciberdefesa – Purple Team

Network Security Analyst – Network Security

Full-Stack Developer

Cyber Identity Consultant, CyberArk – Identity & Risk

Cyber Defense Analyst – Purple Team

Analista Financeiro

Information Security Analyst – Vulnerability Management

Blue Team Analyst

Analista de Cibersegurança de Redes – Network Security Tier 3