Security/SecOps Analyst – SIEM/Sentinel

🔥 15 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kryptus SA

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

💰 $3.7M Venture Round - Kryptus on 2020-07

Consulting • Defense • Cybersecurity

Kryptus SA is a Brazilian multinational provider of cryptography, cybersecurity and cyber‑defense products and services for critical applications. The company develops and supplies hardware and cloud HSMs, PKI and secure-communication systems, and offers managed security services including SOC, pentesting, cryptographic development and consultancy for government, finance, defense and critical infrastructure customers.

📋 Description

• Design, maintain, and govern a hybrid Log Analytics Workspace environment, ensuring strict isolation of the PCI environment through granular RBAC • Translate audit requirements into use cases in Microsoft Sentinel • Create automated reports (Workbooks) • Ensure log retention and immutability • Develop and maintain complex playbooks in Azure Logic Apps • Consume APIs for autonomous response actions, including machine isolation and account blocking • Version detection rules, playbooks, and infrastructure (IaC) integrated with CI/CD pipeline tools • Lead monthly threat-hunting campaigns using cross-workspace queries with advanced KQL • Configure multi-vendor connectors • Optimize ingestion and retention costs in Azure

🎯 Requirements

• Bachelor’s degree in Information Technology or a relevant postgraduate qualification in Information Security • Strong experience with Microsoft Sentinel (SIEM/SOAR) architecture and administration, as well as Azure Log Analytics • Advanced proficiency in KQL (Kusto Query Language) for complex and cross-workspace rules • Practical knowledge of PCI DSS compliance applied to security monitoring • Experience with Infrastructure as Code (IaC) and advanced automation workflows, including API consumption and orchestration • Official Microsoft Security certifications (e.g., SC-200 or SC-100) preferred • Proficiency in tactical mapping using MITRE ATT&CK for the financial services/acquiring sector preferred • Practical knowledge of Microsoft’s ASIM normalization model preferred • Experience with FinOps practices for cloud cost optimization preferred

🏖️ Benefits

• Profit-sharing bonus (PLR) • Health insurance • Dental insurance • Attractive benefits package, including meal and food allowances, among others • Transportation allowance • TotalPass • Day off (your day, your way) • Sesc partnership • Extended maternity and paternity leave • Mental health platform (therapy) • Highly skilled technical team • Low bureaucracy and high impact • Freedom with accountability • Diversity, respect, and creativity valued • Opportunities to grow and contribute to strategic technical decisions • Regular happy hours • Relaxation and social space • A variety of food and beverages available every day, with no limits • Regular feedback • Collaborative environment that respects diversity, minimizes bureaucracy, and consistently encourages creativity and professional growth