Senior Cyber Security Analyst - Blue Team
New
R
RecargaPayCybersecurity
Workable workplace: remote; Workable locations: Brazil; Location: BrazilFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPythonGCPRESTful APIs
Requirements
- Have solid experience managing vulnerabilities or exposure in production environments, with ownership of a program or a significant workstream.
- Have practical expertise with the CrowdStrike Falcon platform, especially exposure, vulnerability, and posture modules such as Falcon Exposure Management or Spotlight.
- Have experience with SASE architectures and Zero Trust concepts, including ZTNA, SWG, and CASB, from a posture and risk perspective.
- Be able to automate security workflows using scripts and integrations, such as Python, APIs, and SOAR.
- Have experience applying AI agents to operational tasks.
- Have a track record of driving remediation with engineering teams without hierarchical authority, using data and risk-based prioritization.
- Have knowledge of cloud security in AWS or GCP and identities as an exposure vector.
- Fintech, payment, or regulated-environment experience, including PCI DSS, BACEN, or LGPD, is an advantage.
- Relevant certifications, such as CrowdStrike CCFA or CCFR, OSCP, CISSP, or cloud certifications, are an advantage.
Responsibilities
- Assume end-to-end ownership of the existing Blue Team Exposure Management program and expand asset coverage, assessment frequency, and remediation speed.
- Maintain continuous visibility into the attack surface across endpoints, cloud, identities, APIs, and internet-exposed assets using CrowdStrike Falcon as the primary telemetry and posture source.
- Prioritize exposures by business risk, considering exploitability, exposure, business criticality, and signals such as CVSS, EPSS, and CISA KEV.
- Design and operate automations and AI agents to reduce manual work in triage, enrichment, correlation, and remediation ticket creation.
- Assess and monitor access and network posture in the SASE architecture, including ZTNA, SWG, and CASB, and identify overly permissive policies and exposure paths.
- Drive remediation with engineering and infrastructure squads, negotiate priorities, track SLAs, and formalize exceptions and risk acceptances.
- Validate exploitability by supporting penetration tests, bug bounty, or attack simulations, and follow through to remediation.
- Define and report program metrics, including exposure trends, MTTR, and SLA compliance, and produce evidence for audits and regulatory requirements.
View Full Description & ApplyYou'll be redirected to the employer's site
