Tech Lead – Cyber Security

Onfly

Tech Lead de Cyber Security at Onfly, responsible for SOC operations and security compliance. Leading technical strategies and fostering security best practices in a cloud-based environment.

Posted 7/24/2026full-timeBelo Horizonte • 🇧🇷 BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Security leadership, focusing on SOC operations, compliance with ISO 27001 and PCI DSS, and the integration of security practices within cloud environments. Proficient in translating information security strategies into actionable technical plans while ensuring adherence to data protection regulations like LGPD.

Highest-signal resume keywords

SOC Operations ManagementISO 27001 ImplementationPCI DSS ComplianceCloud Security (AWS)DevSecOps Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ManagementThreat ResponseRisk ManagementVulnerability ManagementIdentity and Access Management (IAM)Security ArchitectureContinuous MonitoringSecurity Operations Center (SOC)Data Protection FrameworksTechnical Leadership

Soft Skills

Clear CommunicationTechnical Decision-Making

Tools & Technologies

AWSSIEMEncryption ToolsDetection ToolsCI/CD Pipelines

Industry Keywords

LGPDData Protection LawDevSecOpsISMSBug Bounty

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Act as the technical leader of the Cyber Security team, defining standards, security architecture and best practices, and supporting the technical development of other team members;
Translate the information security strategy defined by the Head into executable technical plans aligned with business objectives and Onfly's expansion in Latin America;
Provide technical leadership for the operation of the SOC (Security Operations Center), including continuous monitoring, detection, incident response and vulnerability management;
Technically lead the implementation and maintenance of ISO 27001, ensuring the robustness of ISMS controls;
Ensure technical compliance with PCI DSS, leading scoping, assessments and remediation of non-conformities;
Ensure technical compliance with LGPD (Brazilian Data Protection Law), guiding architectural decisions involving personal data and privacy;
Drive the advancement of DevSecOps practices, integrating security into the development lifecycle in a cloud-native environment (AWS, ECS, microservices);
Technically coordinate the pentest, bug bounty, vulnerability analysis and identity and access management (IAM/PAM) programs;
Serve as a technical reference for Engineering and Product, reviewing architectures and critical security decisions;
Support the Head of Cyber Security in communicating risks and technical decisions to internal and external stakeholders.

Requirements

What you’ll need

Solid experience in SOC operations, including incident management, monitoring and threat response;
In-depth knowledge of ISO 27001, including ISMS implementation, risk management and internal audits;
Technical mastery of PCI DSS, with experience in compliance assessments, scoping and remediation of non-conformities;
Experience acting as a technical authority or technical lead for security teams, not necessarily involving hierarchical people management;
Strong background in cloud security (preferably AWS), including network controls, IAM, encryption, SIEM and detection tools;
Ability to communicate risks and technical decisions clearly to both technical and non-technical audiences;
Knowledge of LGPD and privacy/data protection frameworks;
Experience with DevSecOps, integrating security into CI/CD pipelines and Shift-Left security practices;
Bachelor's degree in Computer Science, Information Systems, Engineering or related fields;

Benefits

Comp & perks

Hybrid work arrangement (3 days in-office per week, remainder remote);
Flexible working hours;
Meal allowance on a flexible card R$40 (no 6% deduction);
Transportation allowance on a flexible card (no 6% deduction);
Unimed health plan, no co-payment and no monthly fee for the Onflyer (covered by us :D);
Dental plan (discount on monthly fee);
Pharmacy discount;
Online psychotherapy benefit (Vittude);
Gym benefits (Gympass);
90% scholarship for language studies;
Annual budget of up to 1k to spend on training/certifications in your area;
Discounts on undergraduate and postgraduate degrees (UNA and UNIBH);
Funeral assistance (Grupo Zelo);
Extended maternity/paternity leave;
R$200 Onhappy voucher (exclusive platform for discounted travel anywhere in Brazil);
Life insurance.