Senior Security Engineer | InfoSec

Accountabilities: Lead hands-on investigation, triage, and response to security incidents, suspicious activities, and threat attempts targeting cloud-based environments. Act as a first-line responder during incident response activities, ensuring timely detection, containment, escalation, and communication with relevant stakeholders. Develop and execute cybersecurity projects, mitigation plans, and security improvements in collaboration with IT, Cloud Security, and engineering teams. Strengthen cybersecurity observability by improving monitoring tools, detection processes, and threat identification capabilities. Monitor SIEM alerts, indicators of compromise, and security use cases to identify and investigate potential threats. Develop, maintain, and improve automation solutions to accelerate security ticket triage and optimize incident response workflows. Design and operate AI-assisted workflows using LLMs and agents for alert triage, enrichment, investigation, and incident response, with appropriate human oversight. Contribute to security detection and response strategies for AI-related risks, including LLM applications, AI agents, and employee use of AI tools. Coordinate dependencies between security initiatives and other technology teams to ensure consistent protection across the organization. Support threat intelligence initiatives, proactively identify vulnerabilities and security challenges, and communicate findings and recommendations to leadership. Promote a strong security culture by collaborating with colleagues and encouraging continuous improvement in cybersecurity practices. Requirements: Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field. Mandatory professional experience in Security Engineering and cloud security environments. Hands-on experience with AWS, including deploying and managing medium- to large-scale projects. Experience detecting, analyzing, and investigating hacking attempts, security incidents, and alerts from monitoring systems. Practical experience with SIEM platforms, including monitoring alarms, indicators of compromise, and detection use cases. Programming skills and experience developing automation solutions. Understanding of information security frameworks, standards, and best practices. Familiarity with security and compliance standards such as GDPR, PCI-DSS, ISO 27001, SOC 2, and HIPAA. Experience using AI tools and LLM-based automation to improve investigations, alert triage, and detection engineering, with the ability to critically validate their outputs. Understanding of AI security risks, including prompt injection, data leakage, insecure agent or tool access, and shadow AI. Strong analytical and problem-solving skills, with the ability to investigate incidents proactively and recommend effective preventive measures. Excellent stakeholder management and communication skills, including the ability to coordinate projects and present security findings to leadership. Fluent, professional English and Portuguese, both written and spoken. Strong collaboration skills and the ability to work effectively with security engineers and cross-functional technology teams. Benefits: Fully remote position, open to candidates located anywhere in Brazil. Flexible working arrangements, with the opportunity to align schedules with team needs and personal routines. Flexible benefits program allowing employees to customize selected benefits. Free Gold+ wellness membership, including access to gyms, fitness studios, digital fitness programs, meditation, nutrition, and mental wellbeing resources. Ability to add up to three family members to the wellness membership. Emotional wellbeing program with personalized support, including up to 52 individual therapy sessions per year and on-demand content. Health, dental, and life insurance. Home office reimbursement. Paid vacation after six months of employment. Three additional days off per year, plus one extra day for each year of tenure, up to five additional days. Birthday leave. 100% paid parental leave for all new parents, with extended leave and a gradual return-to-work arrangement for parents giving birth. Access to professional development platforms, interactive learning sessions, personalized development plans, and internal career opportunities. Collaborative, international, and inclusive working environment focused on employee wellbeing and continuous growth.