- Guararema, Sao Paulo, Brazil
- On-site
- 3+ years
Support the Cybersecurity Operations SIEM Detection Engineering capability across teams and business segments.
Compensation
An industry competitive salary and benefits package, including company bonus.
Responsibilities
- Create, deploy and maintain SIEM detection rules aligned with MITRE ATT&CK
- Validate detections through testing and attack simulation before and after deployment
- Review and tune existing detections using performance metrics to improve true positive rates, reduce false positives and retire noisy or low-value rules
- Identify gaps in detection coverage across business segments and prioritize new use cases based on threat relevance and risk
- Ensure security telemetry is complete, accurate and suitable for detection use cases
Requirements
- Nice to have: detection-as-code
- Nice to have: cybersecurity certifications
- Nice to have: SOAR concepts