Analista de Segurança da Informação Jr. (SOC – MDR)

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Analista de Segurança da Informação Jr. (SOC – MDR) based in Brazil.** We are looking for a motivated cybersecurity professional to join a Security Operations Center (SOC) team focused on Managed Detection and Response (MDR). In this role, you will actively monitor security events, investigate suspicious activity, and help protect client environments against evolving cyber threats. You will work with security technologies such as SIEM, SOAR, EDR, and XDR to identify potential incidents and support effective response strategies. Your work will contribute to threat detection, incident mitigation, and the continuous improvement of security operations. This opportunity is ideal for an analytical, detail-oriented professional who wants to develop hands-on experience in cybersecurity within a collaborative technical environment. The position follows a 12x36 daytime schedule, with hybrid work in Curitiba or remote work for candidates based in São Paulo. ### Accountabilities - Monitor security alerts and events in real time within the Security Operations Center (SOC), identifying suspicious behavior and potential threats. - Investigate security incidents, determine their possible causes, assess their impact, and support appropriate response and mitigation actions. - Use SIEM platforms and other security technologies to collect, analyze, and correlate security data, helping identify patterns and indicators of compromise. - Prepare clear, structured technical reports documenting incident findings, diagnoses, potential impacts, and recommendations for mitigation and prevention. - Respond promptly to security incidents by following established procedures and coordinating with relevant technical teams when escalation or additional support is required. - Contribute to the continuous improvement of security monitoring, incident investigation, and response processes. - Maintain accurate and complete documentation of investigations and response activities to support compliance with applicable security standards and regulations. - Apply analytical thinking and attention to detail when assessing alerts, validating information, and determining appropriate next steps. ### Requirements - Currently pursuing a bachelor's degree or other higher education program in Information Technology, Computer Science, Cybersecurity, or a related field. - Previous experience working with Security Information and Event Management (SIEM) tools, such as Splunk or IBM QRadar. - Foundational experience or knowledge of security alert investigation and incident response processes. - Familiarity with security technologies and platforms, including SIEM, Security Orchestration, Automation and Response (SOAR), Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR). - Knowledge of programming logic and the ability to apply structured reasoning when analyzing security events. - Strong analytical skills, with the ability to interpret data, recognize patterns, and identify suspicious activities. - Clear and effective communication skills, including the ability to explain technical security findings to both technical and non-technical audiences. - Strong attention to detail, ensuring information is validated carefully before making decisions that may affect security operations. - Proactive problem-solving skills and the ability to identify potential issues and recommend solutions with appropriate independence. Preferred qualifications and additional knowledge: - Relevant cybersecurity certifications, such as CompTIA Security+, CompTIA Cybersecurity Analyst+ (CySA+), EC-Council Certified Incident Handler (ECIH), or EC-Council Certified SOC Analyst (CSA). - Familiarity with security frameworks, standards, and threat analysis methodologies, including NIST SP 800-61, NIST Cybersecurity Framework (NIST CSF), PCI DSS, MITRE ATT&CK, MITRE D3FEND, and the Cyber Kill Chain. ### Benefits - Salary: Up to R$4,000 per month. - Employment contract: CLT employment arrangement. - Work schedule: Daytime shift from 7:00 a.m. to 7:00 p.m., following a 12x36 schedule (12 hours on, followed by 36 hours off). - Work arrangement in Curitiba, Paraná: Hybrid, with three days per week in the office and two days working from home. - Work arrangement in São Paulo, São Paulo: Fully remote, with the position associated with the Vila Olímpia area. - Meal and food allowance (VR/VA): R$1,100 per month, with a R$1 payroll deduction. - Transportation allowance (VT): Public transportation support based on individual commuting needs. - Health insurance: Amil S450 medical plan at no cost to the employee; the employer covers 60% of the cost of dependent coverage. - Dental insurance: Amil dental plan, with the monthly premium deducted from payroll. - Additional insurance: Health insurance coverage at no cost to the employee, as described in the original posting. - Wellness benefits: TotalPass access and a fruit day at the main office on Tuesdays and Wednesdays. - Team culture: Company celebrations and events to recognize achievements. - Annual bonus: Performance-based bonus according to target achievement. - Professional development: Financial support and incentives for courses, training programs, and professional certifications.