Sr. Cyber Security Analyst

Come Make an Impact on Millions of Brazilians! At RecargaPay, we're on a mission to deliver the best payment experience for Brazilian consumers and small businesses — by building a powerful digital ecosystem where the banked and unbanked connect, and where consumers and merchants have a one-stop shop for all their financial needs. We serve over 10 million users and process more than USD 4 billion annually. We've been profitable since 2022 and operate our own credit business. We are an AI-first, 100% remote team, scaling in the rapidly changing Brazilian financial market. Our goal? Deliver the best payment experience in Brazil for people and small businesses alike. We value autonomy, ownership, and a bias for action. We're looking for people who are curious, hands-on, and driven by impact — who want to solve real problems, work with strong teams, and rethink what's possible. If you're ready to do your best work, at scale, with purpose — this is your place. Position Overview RecargaPay is looking for a Senior Cyber Security Analyst to join our CSIRT (Computer Security Incident Response Team). Reporting to the CSIRT Coordinator, this person will be a hands-on individual contributor focused on Detection & Response (Blue Team) — investigating, containing, and eradicating security incidents across our cloud-native, high-volume payments platform, and continuously improving our detection coverage and automations.Key ResponsibilitiesAct as a senior responder across the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-mortem. Perform threat hunting and proactive investigation across endpoints, cloud, and network telemetry. Build, tune, and maintain detection rules, dashboards, and alerts on Elastic (Elasticsearch/Kibana), reducing false positives and improving signal quality. Develop and maintain detection and response automations (SOAR) to orchestrate workflows and reduce manual toil.Investigate and respond to endpoint incidents via CrowdStrike (EDR), including containment and root-cause analysis.Investigate and respond to incidents in AWS (CloudTrail, GuardDuty, IAM, VPC, etc.). Conduct log analysis and investigation across Linux systems. Contribute to and maintain playbooks, runbooks, and response procedures. Produce clear incident documentation, timelines, and lessons-learned reports. Collaborate with engineering, infrastructure, and compliance teams to remediate vulnerabilities and strengthen the security posture.RequirementsTechnical Skills Solid hands-on experience as a security analyst in a SOC/CSIRT or Blue Team, handling real incidents end to end. Strong command of Elasticsearch/Elastic Stack for detection engineering, hunting, and alerting. Experience with AWS security (native security services and cloud log investigation). Hands-on experience with CrowdStrike or an equivalent EDR. Workflow automation and orchestration using a SOAR/automation platform. Strong Linux proficiency (administration, hardening, and log analysis). Fluency with frameworks such as MITRE ATT&CK, NIST IR, and incident taxonomies. Soft Skills Strong analytical skills and ability to stay effective under pressure during active incidents. Hands-on ownership: takes full responsibility for incidents assigned, seeing them through from alert to closed post-mortem without hand-holding. Detection craft: proactively identifies gaps in coverage and improves rule quality — doesn't just work the queue. Clear communication under pressure: keeps stakeholders informed during active incidents with concise, accurate updates.Collaborative remediation: works effectively with engineering and infrastructure partners to close vulnerabilities, not just document them. Continuous learning: stays current on the threat landscape relevant to fintech/payments and brings relevant insights back to the team. Soft Skills Strong analytical skills and ability to stay effective under pressure during active incidents. Hands-on ownership: takes full responsibility for incidents assigned, seeing them through from alert to closed post-mortem without hand-holding. Detection craft: proactively identifies gaps in coverage and improves rule quality — doesn't just work the queue. Clear communication under pressure: keeps stakeholders informed during active incidents with concise, accurate updates.Collaborative remediation: works effectively with engineering and infrastructure partners to close vulnerabilities, not just document them. Continuous learning: stays current on the threat landscape relevant to fintech/payments and brings relevant insights back to the team.Nice to HaveBackground in financial services, fintech, or other high-volume transactional environments. Scripting (Python / Bash) for automation and tool integration. Certifications such as GCIH, GCIA, GCFA, GNFA, or equivalent. Experience with compliance requirements (PCI-DSS, LGPD). BenefitsCompetitive and market-aligned salary.Remote work — wherever you are, you’re part of the team!Home office allowance through a monthly deposit in the RecargaPay app.Health and dental plans with no co-pay.Life insurance.Flexible meal allowance (via Flash).TotalPass membership to take care of your health.Diversity & Inclusion at RecargaPayAt RecargaPay, you’ll have the freedom to be who you are because we believe that diverse perspectives and experiences make us more creative and stronger. Here, everyone is welcome to express themselves authentically. We value the richness of each journey and the multiple ways of seeing the world, without distinctions of gender, race, sexual orientation, age, religion, or any other characteristic that makes us unique.About the Use of Your DataBy sharing your resume with us, you authorize the use of your data for analysis during the selection process and possibly for other opportunities within the RecargaPay group. You can request the update or deletion of your information at any time, in accordance with LGPD (General Data Protection Law).

• Come Make an Impact on Millions of Brazilians! At RecargaPay, we're on a mission to deliver the best payment experience for Brazilian consumers and small businesses — by building a powerful digital ecosystem where the banked and unbanked connect, and where consumers and merchants have a one-stop shop for all their financial needs. We serve over 10 million users and process more than USD 4 billion annually. We've been profitable since 2022 and operate our own credit business. We are an AI-first, 100% remote team, scaling in the rapidly changing Brazilian financial market. Our goal? Deliver the best payment experience in Brazil for people and small businesses alike. We value autonomy, ownership, and a bias for action. We're looking for people who are curious, hands-on, and driven by impact — who want to solve real problems, work with strong teams, and rethink what's possible. If you're ready to do your best work, at scale, with purpose — this is your place.
  
  Position Overview
  RecargaPay is looking for a Senior Cyber Security Analyst to join our CSIRT (Computer Security Incident Response Team). Reporting to the CSIRT Coordinator, this person will be a hands-on individual contributor focused on Detection & Response (Blue Team) — investigating, containing, and eradicating security incidents across our cloud-native, high-volume payments platform, and continuously improving our detection coverage and automations.

Key Responsibilities

• Act as a senior responder across the full incident lifecycle: detection, triage, containment, eradication, recovery, and post-mortem.
• Perform threat hunting and proactive investigation across endpoints, cloud, and network telemetry.
• Build, tune, and maintain detection rules, dashboards, and alerts on Elastic (Elasticsearch/Kibana), reducing false positives and improving signal quality.
• Develop and maintain detection and response automations (SOAR) to orchestrate workflows and reduce manual toil.
• Investigate and respond to endpoint incidents via CrowdStrike (EDR), including containment and root-cause analysis.
• Investigate and respond to incidents in AWS (CloudTrail, GuardDuty, IAM, VPC, etc.).
• Conduct log analysis and investigation across Linux systems.
• Contribute to and maintain playbooks, runbooks, and response procedures. Produce clear incident documentation, timelines, and lessons-learned reports.
• Collaborate with engineering, infrastructure, and compliance teams to remediate vulnerabilities and strengthen the security posture.

Requirements

Technical Skills

• Solid hands-on experience as a security analyst in a SOC/CSIRT or Blue Team, handling real incidents end to end. Strong command of Elasticsearch/Elastic Stack for detection engineering, hunting, and alerting.
• Experience with AWS security (native security services and cloud log investigation).
• Hands-on experience with CrowdStrike or an equivalent EDR.
• Workflow automation and orchestration using a SOAR/automation platform. Strong Linux proficiency (administration, hardening, and log analysis).
• Fluency with frameworks such as MITRE ATT&CK, NIST IR, and incident taxonomies. Soft Skills Strong analytical skills and ability to stay effective under pressure during active incidents.
• Hands-on ownership: takes full responsibility for incidents assigned, seeing them through from alert to closed post-mortem without hand-holding.
• Detection craft: proactively identifies gaps in coverage and improves rule quality — doesn't just work the queue. Clear communication under pressure: keeps stakeholders informed during active incidents with concise, accurate updates.
• Collaborative remediation: works effectively with engineering and infrastructure partners to close vulnerabilities, not just document them.
• Continuous learning: stays current on the threat landscape relevant to fintech/payments and brings relevant insights back to the team.

Soft Skills

• Strong analytical skills and ability to stay effective under pressure during active incidents.
• Hands-on ownership: takes full responsibility for incidents assigned, seeing them through from alert to closed post-mortem without hand-holding.
• Detection craft: proactively identifies gaps in coverage and improves rule quality — doesn't just work the queue. Clear communication under pressure: keeps stakeholders informed during active incidents with concise, accurate updates.
• Collaborative remediation: works effectively with engineering and infrastructure partners to close vulnerabilities, not just document them.
• Continuous learning: stays current on the threat landscape relevant to fintech/payments and brings relevant insights back to the team.

Nice to Have

• Background in financial services, fintech, or other high-volume transactional environments.
• Scripting (Python / Bash) for automation and tool integration. Certifications such as GCIH, GCIA, GCFA, GNFA, or equivalent.
• Experience with compliance requirements (PCI-DSS, LGPD).

Benefits

• Competitive and market-aligned salary.
• Remote work — wherever you are, you’re part of the team!
• Home office allowance through a monthly deposit in the RecargaPay app.
• Health and dental plans with no co-pay.
• Life insurance.
• Flexible meal allowance (via Flash).
• TotalPass membership to take care of your health.
  

Diversity & Inclusion at RecargaPay

At RecargaPay, you’ll have the freedom to be who you are because we believe that diverse perspectives and experiences make us more creative and stronger. Here, everyone is welcome to express themselves authentically. We value the richness of each journey and the multiple ways of seeing the world, without distinctions of gender, race, sexual orientation, age, religion, or any other characteristic that makes us unique.

About the Use of Your Data

By sharing your resume with us, you authorize the use of your data for analysis during the selection process and possibly for other opportunities within the RecargaPay group. You can request the update or deletion of your information at any time, in accordance with LGPD (General Data Protection Law).

RecargaPay is the payments app for all Brazilians whose mission is to democratize mobile payments & financial services in Brazil. We strive to empower individuals and small businesses to take control of their financial lives. In an easy, fast, and secure way, we facilitate access to customers & merchants to solve their needs with convenience, security, and without the need to wait in lines. It's easier to pay bills with the options of installments in up to 12x, to cash in using boleto, credit card, debit cards, loans, QR codes, mPOS and Pix, and cash-out with multiple efficient alternatives.Founded in 2010 by Rodrigo Teijeiro (CEO), Alvaro Teijeiro (CTO) and Gustavo Victorica (COO). RecargaPay has raised over US$ 80 million in venture capital from a group of investors led by IFC, DN Capital, FJ Labs, The Venture City, IDC, ATW and more than 100 angel investors from AngelList and FundersClub.WE BELIEVE That we live in an era of constant disruption, vast opportunities, and ample liquidity to be put at the service of new ideas. That a smartphone per every human is just a matter of time and all industries will be disrupted as a consequence. That small interdisciplinary teams, committed to solving complex problems at scale, are the best positioned to have a deep and positive impact. WE ARE A BOLD, PASSIONATE GROUP OF INDIVIDUALS WITH VAST EXPERIENCE BUILDING COMPANIES AND PRODUCTS ON THE BASIS OF THESE CONVICTIONS, ALL AIMING TO MAKE YOUR LIFE EASIER THROUGH APPLIED TECHNOLOGY.

RecargaPay is the payments app for all Brazilians whose mission is to democratize mobile payments & financial services in Brazil. We strive to empower individuals and small businesses to take control of their financial lives. In an easy, fast, and secure way, we facilitate access to customers & merchants to solve their needs with convenience, security, and without the need to wait in lines. It's easier to pay bills with the options of installments in up to 12x, to cash in using boleto, credit card, debit cards, loans, QR codes, mPOS and Pix, and cash-out with multiple efficient alternatives.

Founded in 2010 by Rodrigo Teijeiro (CEO), Alvaro Teijeiro (CTO) and Gustavo Victorica (COO). RecargaPay has raised over US$ 80 million in venture capital from a group of investors led by IFC, DN Capital, FJ Labs, The Venture City, IDC, ATW and more than 100 angel investors from AngelList and FundersClub.

WE BELIEVE

• That we live in an era of constant disruption, vast opportunities, and ample liquidity to be put at the service of new ideas.
• That a smartphone per every human is just a matter of time and all industries will be disrupted as a consequence.
• That small interdisciplinary teams, committed to solving complex problems at scale, are the best positioned to have a deep and positive impact.

WE ARE A BOLD, PASSIONATE GROUP OF INDIVIDUALS WITH VAST EXPERIENCE BUILDING COMPANIES AND PRODUCTS ON THE BASIS OF THESE CONVICTIONS, ALL AIMING TO MAKE YOUR LIFE EASIER THROUGH APPLIED TECHNOLOGY.