Want to know if this job is worth applying to?
Brasil
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior IT Security Engineer based in Brazil.
We are seeking an experienced Senior IT Security Engineer specializing in Incident Response to strengthen cybersecurity operations across the Americas. In this role, you will act as the primary liaison between regional IT Operations teams and a global Cyber Defense Center, coordinating security incidents from initial detection through resolution. You will lead incident investigations, threat analysis, containment, recovery, and digital forensic activities while ensuring alignment with global security standards. Working in an international and multicultural environment, you will collaborate with technical teams, business stakeholders, and senior leadership to minimize security risks and strengthen organizational resilience. You will also contribute to the continuous improvement of incident response processes and develop strategies to address emerging cyber threats, including AI-powered attacks.
Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for cybersecurity incident management.
Coordinate the complete security incident lifecycle, including triage, investigation, containment, eradication, recovery, escalation, and post-incident reviews.
Manage regional security incidents from detection to closure, ensuring compliance with global response procedures and identifying operational gaps.
Maintain clear and timely communication with technical teams, regional stakeholders, senior management, and executive leadership throughout incident investigations.
Develop a comprehensive understanding of regional business units, IT environments, operational workflows, technology dependencies, and security risks.
Conduct digital forensic investigations while ensuring proper evidence collection, preservation, integrity, chain of custody, and documentation.
Perform security analysis across Windows, Linux/UNIX, cloud, network, email, endpoint, and enterprise technology environments.
Investigate security alerts, system logs, threat intelligence, incident tickets, and reports using SIEM platforms and other security operations tools.
Prepare detailed investigation findings, incident briefings, risk assessments, and post-incident reports for both technical and non-technical audiences.
Monitor emerging AI-enabled cyber threats and defensive technologies, including deepfakes, automated phishing, adversarial machine learning, response automation, and AI-assisted threat intelligence.
Develop and continuously improve incident response playbooks, operational procedures, runbooks, security tools, and service improvement initiatives.
Mentor junior incident responders, share technical expertise, and contribute to strengthening regional cybersecurity capabilities.
Strong professional experience in cybersecurity incident response, security operations, incident coordination, containment, recovery, and post-incident analysis.
Hands-on expertise in digital forensics, evidence handling, chain of custody, log analysis, threat intelligence, and investigative documentation.
Experience working with SIEM platforms, security monitoring solutions, email security tools, ticketing systems, and enterprise security operations processes.
Broad technical knowledge of enterprise IT environments, including Windows, Linux/UNIX, directory services, AWS, Azure, mobile device management, virtualization, networks, web servers, databases, and firewalls.
Proficiency in at least one programming or scripting language, such as Python, PowerShell, or Bash.
Understanding of security controls, security operations, risk management, and enterprise information security governance.
Familiarity with artificial intelligence and machine learning concepts, particularly their application to cyber threats, detection, response automation, and defensive security technologies.
Excellent analytical thinking, problem-solving, prioritization, and decision-making abilities, especially when managing high-impact security incidents.
Strong written and verbal communication skills, with the ability to present complex technical findings and brief senior management and executive stakeholders.
Proven ability to collaborate effectively across international, multicultural, and geographically distributed teams.
Fluency in English, both written and spoken.
Preferred qualifications:
Professional certifications such as CISSP, GCIH, GIAC, CISA, CISM, CompTIA CySA+, or equivalent cybersecurity credentials.
Experience with cloud incident response and cloud-native security tools in AWS or Azure environments.
Knowledge of enterprise security governance frameworks and global information security policies.
Familiarity with privacy and regulatory requirements across the Americas, including Brazil's LGPD, US state privacy laws, and Canadian privacy regulations.
Relevant training or certifications in artificial intelligence or machine learning security.
Knowledge of Spanish or Portuguese in addition to English.
Competitive and negotiable compensation based on experience and qualifications.
Fully remote working arrangement within Brazil.
Full-time professional engagement under a Brazilian PJ (contractor) arrangement.
Senior-level position offering significant ownership and responsibility in cybersecurity incident response.
Opportunity to collaborate with global Cyber Defense and IT Operations teams.
Exposure to advanced cybersecurity technologies, digital forensics, cloud security, and AI-driven threat detection.
Opportunities to mentor other security professionals and contribute to global security initiatives.
Professional development through involvement in complex, high-impact security investigations and continuous improvement projects.
