Senior IT Security Engineer – Incident Response

Job not on LinkedIn

🔥 17 minutes ago

🇧🇷 Brazil – Remote

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 59 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Keep IT Simple

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 1988

📦 Logistics

🏥 Healthcare

🔒 Cybersecurity

Logistics • Healthcare • Cybersecurity

Keep IT Simple (KIS) is an IT services and solutions provider based in Silicon Valley, serving customers throughout California and beyond since 1988. They specialize in providing expertise in cybersecurity, virtualization, cloud solutions, and consulting for network infrastructures, helping clients navigate and solve complex IT challenges. KIS is dedicated to delivering comprehensive, cost-effective IT solutions and exceptional customer service.

📋 Description

• Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for security incident management activities • Coordinate incident triage, containment, eradication, recovery, escalation, and post-incident review for events affecting Americas IT assets • Manage the regional incident lifecycle from detection through closure, ensuring alignment with global processes and addressing regional operational gaps • Maintain timely, clear, and consistent communication with technical teams, regional stakeholders, senior management, and executive audiences • Develop a detailed understanding of regional organizations, business units, technology environments, operational workflows, risks, and dependencies • Handle digital evidence in a forensically sound manner, preserving chain of custody, integrity, and documentation standards • Perform security analysis and digital forensics across Windows, Linux or UNIX, cloud, network, email, endpoint, and enterprise environments • Analyze alerts, logs, threat intelligence, tickets, and reports from multiple sources, including SIEM and security operations platforms • Prepare investigation findings, incident briefings, risk assessments, and post-incident reports for technical and non-technical audiences • Monitor AI-enabled attack techniques and defensive capabilities, including deepfakes, automated phishing, adversarial machine learning, response automation, and AI-assisted threat intelligence • Contribute to incident response playbooks, runbooks, standard operating procedures, tooling, and service improvement initiatives • Mentor junior incident responders and share expertise across the regional security organization

🎯 Requirements

• Strong expertise in cybersecurity incident response, security operations, incident coordination, containment, recovery, and post-incident analysis • Hands-on knowledge of digital forensics, evidence handling, chain of custody, log analysis, threat intelligence, and investigative documentation • Experience with SIEM platforms, security monitoring tools, email and ticketing systems, and enterprise security operations workflows • Broad knowledge of Windows, Linux or UNIX, directory services, AWS, Azure, mobile device management, virtualization, networks, web servers, databases, and firewalls • Proficiency in at least one programming or scripting language, such as Python, PowerShell, or Bash • Understanding of security control development, security operations, security risk management, and enterprise security governance • Familiarity with AI and machine learning concepts as they relate to cybersecurity threats, detection, response automation, and defensive technologies • Strong analytical thinking, problem-solving, prioritization, and decision-making skills during high-impact incidents • Excellent written and verbal communication skills, including the ability to brief senior management and executive stakeholders • Ability to collaborate effectively across organizational, cultural, and geographic boundaries • Fluent English, both written and spoken • Proven experience collaborating with international and multicultural teams • 8+ years of professional experience in Information Technology, including at least 6 years in cybersecurity, incident response, security operations, or a closely related discipline • Demonstrated experience managing and coordinating security incidents in a matrixed, global, or multi-region organization • Experience working with or alongside a centralized Security Operations Center or Cyber Defense Center • Experience supporting incident response across multiple countries or regions, preferably within the Americas • Experience communicating incident status, risk, business impact, and remediation actions to senior and executive stakeholders • Bachelor's degree in Information Security, Computer Science, Information Systems, Business Administration, or a related field, or equivalent specialized training and professional experience

🏖️ Benefits

• 100% remote working model • PJ (Pessoa Jurídica) contracting model • Schedule flexibility • Participation in incident response activities outside standard business hours may occasionally be required for major security incidents or critical events

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume