Senior Cybersecurity Analyst – Blue Team

🔥 5 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ASAAS

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2010

💼 Consulting

🏥 Healthcare

🏨 Hospitality

Consulting • Healthcare • Hospitality

ASAAS is a leading producer of 360° virtual tours in virtual reality. The company specializes in creating customized virtual tours, utilizing advanced technologies, including 360° video, drone technology, and interactive features, to enhance business visibility and engagement. With a commitment to quality and customer satisfaction, ASAAS offers immersive experiences for various industries, including schools, hotels, museums, and healthcare facilities, and aims to elevate online presence through innovative virtual solutions.

📋 Description

• Manage the EDR platform end to end, including blocking/prevention policies, exception governance, environment coverage, and tuning to reduce false positives • Serve as the SOC’s senior escalation point and lead the incident lifecycle based on NIST SP 800-61 • Conduct triage, containment, root cause analysis, digital investigation/forensics, and post-incident reviews/lessons learned • Support insider threat investigations and collaborate with Legal, Privacy/LGPD, and Risk teams on critical cases or formal risk acceptance • Define mitigation strategies and security baselines for endpoints and cloud environments • Prioritize findings from penetration tests, bug bounty programs, and continuous scans • Convert IOCs and TTPs into prevention and blocking rules and new security controls • Assess the security implications of releasing new software, extensions, plugins, and AI tools • Develop playbooks and standard operating procedures • Automate routine tasks, monitor team metrics, and mentor less experienced analysts

🎯 Requirements

• Strong experience managing EDR/XDR in a corporate environment, including configuring behavior-based prevention policies, tuning detections, and governing exceptions • Strong experience in security incident response, managing cases from start to finish • Ability to investigate endpoint activity using EDR telemetry and map observed behavior to MITRE ATT&CK techniques • In-depth knowledge of defense and hardening for Windows, Linux, and macOS • Experience in vulnerability management, prioritizing vulnerabilities based on severity, active exploitation, and asset criticality, and tracking remediation with other teams • Knowledge of NIST SP 800-61, NIST CSF, ISO 27001/27002, CIS Controls, and CIS Benchmarks • Experience leading Blue Team process improvement projects, including automation and the use of AI in operational security routines • Strong technical writing skills and the ability to mentor analysts and communicate effectively with technical and non-technical teams • Certifications such as CompTIA Security+ or equivalent are a plus • Experience with EDR/XDR platforms such as SentinelOne, CrowdStrike Falcon, or Microsoft Defender for Endpoint is a plus • Experience with Jamf Pro, ManageEngine Endpoint Central, Intune, or Kandji is a plus • Experience with cloud vulnerability and attack surface management tools such as Wiz, Tenable, Qualys, or Rapid7, along with AWS knowledge, is a plus • Experience with Threat Intelligence platforms such as Axur, Tempest, Recorded Future, or MISP is a plus • Knowledge of digital forensics is a plus • Experience with DLP and traffic and data protection solutions such as Netskope, Zscaler, Palo Alto Prisma Access, or Microsoft Purview is a plus • Knowledge of LGPD and Bacen regulatory requirements applicable to incidents is a plus • Experience automating workflows with n8n and AI nodes is a plus • English proficiency for communicating with vendors is a plus

🏖️ Benefits

• Medical and dental insurance with no copay • Life insurance • Prescription medication assistance • Fitness and wellness allowance • Four free therapy or nutritionist sessions per month • Quick massage at the headquarters • Flexible meal benefit on a Visa card • Free food at the headquarters • Childcare assistance • Parental support program • Extended maternity and paternity leave • In-house training platform • Education assistance covering 70% of undergraduate and language course tuition, as well as courses and books • Home office allowance • Work equipment • Home office furniture allowance • Partnership with WOBA for access to coworking spaces throughout Brazil • Birthday month day off • Happy hour allowance • Referral bonus for recommending new employees • Annual performance-based bonus • Stock options plan • No dress code

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume