Cyber Defense Analyst – Blue Team

Job not on LinkedIn

November 12

Apply Now

Receive Emails with Similar Jobs

ISH Tecnologia

WebsiteLinkedInAll Job Openings

Cybersecurity • Cloud • Information Technology

ISH Tecnologia is a leading company in Brazil that specializes in information security and technology infrastructure. With over 26 years of experience, ISH provides a range of services including cyber security solutions, risk management, compliance, and business continuity planning. Their mission is to protect companies in the digital landscape, allowing them to focus on their growth while mitigating digital risks through a proactive and customized security approach.

501 - 1000 employees

Founded 1996

🔒 Cybersecurity

📋 Description

• Continuously monitor SIEM dashboards (Security Information and Event Management), ITSM platforms (IT Service Management) and other security devices (IPS, firewalls, etc.); • Prevent and mitigate malicious cyber actions, whether intentional or accidental; • Analyze and assess network events and system anomalies in a SOC environment; • Perform initial analysis of security alerts, identifying false positives and potential incidents; • Ensure correct classification of alerts by severity and type (malware, brute force, phishing, etc.); • Create, follow and ensure the applicability of security playbooks for triage, analysis and escalation of alerts; • Tune and adjust alerts for improved detection and prevention; • Escalate confirmed or high-complexity incidents to N2/N3; • Collaborate with senior analysts (N2+) in cyber threat research and investigations; • Adopt an investigative, analytical and curious mindset when approaching security events; • Handle incidents, requests, problems and changes related to the managed solutions; • Create analytical and post-incident reports; • Support the development, monitoring and maintenance of performance indicators (KPIs); • Ensure SLA compliance and contribute to the success metrics of the CSIRT area.

🎯 Requirements

• Higher education (completed or in progress) in Information Technology or related fields; • Availability to work a 12x36 shift schedule (12 hours on, 36 hours off); • Preferred: CompTIA Security+; • Preferred: LPI-I; • Preferred: ITIL; • Preferred knowledge of information security, computer networks and IT infrastructure; • Preferred experience monitoring and detecting threats, attacks and security breaches using log analysis and security alert tools; • Preferred knowledge of security standards and frameworks such as: CIS, MITRE ATT&CK, NIST, ISO 27001; • Preferred experience creating and updating procedures, processes, workbooks and playbooks focused on cybersecurity; • Preferred knowledge of security concepts such as authentication, authorization, encryption and data protection; • Preferred knowledge of good documentation practices; • Preferred knowledge of fundamental security concepts: authentication, authorization, encryption, data protection, hardening and vulnerability management; • Preferred familiarity with Windows and Linux operating systems (logs, services, processes, permissions);

🏖️ Benefits

• Health plan with no monthly fee for you (co-payment); • Dental plan with no monthly fee for you; • Life insurance; • Pipo Saúde: digital health and corporate benefits broker; • Zenklub: emotional health and well-being platform with special discounts; • TotalPass: platform that connects you to various networks to help care for your well-being (and your family’s); • Private pension plan; • Transportation allowance; • Meal or food allowance; • Birthday day off: enjoy a day off in your birthday month; • Casual ISH – Comfort and professionalism go hand in hand: choose an outfit that reflects your well-being while respecting the workplace; • Breakfast and afternoon snacks with fruit to boost energy for the in-person routine; • Employee referral program with cash bonus; • Onboarding kit: we prepare a comprehensive kit to support you in your day-to-day work.