Purple Team Analyst

🕒 August 17

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vision Cybersecurity

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Vision Cybersecurity is a cybersecurity-focused company. The available information is mostly website/CSS fragments and Portuguese UI text (e. g. , 'Siga nossas redes sociais', 'Ouça o Podcast Safetalks'), which indicates the company maintains an online presence and produces content such as a podcast. There are no explicit details about specific products, services, customers, or company size in the provided text. Based on the name and the content, the primary focus is cybersecurity.

📋 Description

• Plan and execute attack simulations based on real-world scenarios and Cyber Threat Intelligence (CTI), using the MITRE ATT&CK framework • Continuously test the effectiveness of security tools, including SIEM, EDR, NDR and firewalls • Work with SOC analysts and Detection Engineering to create, tune and refine detection rules • Increase alert fidelity and reduce false positives and operational fatigue • Implement and manage automated tests with Breach and Attack Simulation (BAS) tools or open-source frameworks • Map visibility gaps, such as logs that do not reach the SIEM • Translate emulation results into actionable reports, root cause analyses (RCA) and improvement plans for technical teams and management • Ensure closure of the learning cycle

🎯 Requirements

• Solid prior experience in Incident Response, SOC L2/L3, Threat Hunting or Penetration Testing/Red Teaming • Ability to translate adversary TTPs into practical tests and monitoring rules • Experience with SIEM platforms such as Splunk, Microsoft Sentinel and QRadar • Experience with EDR/XDR platforms such as CrowdStrike, Defender for Endpoint and Cortex XDR • Knowledge of scripting languages and automation • Deep knowledge of Windows and Linux • Knowledge of Active Directory (AD) and Entra ID architectures and vulnerabilities • Degree in Information Technology, Cybersecurity or related fields desirable • Intermediate English for reading and analyzing technical documentation and communicating with international teams • Experience with Atomic Red Team, Caldera, Prelude or BAS platforms such as Picus, AttackIQ and Cymulate • Knowledge of writing Sigma and YARA rules • Knowledge of security testing and native logs in AWS, Azure and GCP • Experience creating, tuning and validating detection rules, hunting queries and correlations for SIEM, EDR/XDR and monitoring platforms

🏖️ Benefits

• Bradesco Top National health insurance • Odontoprev dental plan • Life insurance • Pipo Saúde: digital health and corporate benefits broker • TotalPass • Transportation allowance • Alelo Tudo: food and meal on a single card • Private pension plan with double employer match • Birthday day off • Employee referral campaign • Tuition discounts at educational institutions • Vision Baby kit • Exclusive discounts at the SESC group • Welcome kit • Breakfast and afternoon fruit on in-office days • DeepLearning: Corporate University • Opportunities for professional growth • Culture of feedback and development • Exclusive leadership program • Relaxed, innovation-driven environment • Accessible leadership