Security Engineer

Role: SecOps EngineerSalary: Competitive package + equityLocation: Rio de Janeiro - Hybrid Note: This role may require occasional out of hours and weekend work.SummaryOur client, a rapidly growing HealthTech Unicorn, is on a mission to humanise the healthcare experience for doctors, patients, and clinics through their digital product. A leader in 13 countries supporting millions of patients and doctors, our client is now turning their focus to the security team and seeking a crucial hire to support their growth.We are looking for a seasoned Senior Security Operations Engineer to join our team. In this role, you will lead incident response initiatives and conduct thorough cybersecurity investigations to mitigate risks effectively. You will play a key role in enhancing our security program by refining processes, optimizing tooling and implementing advanced threat detection and mitigation strategies across diverse technology landscapes.Responsibilities:Perform daily alert investigation and incident response in both cloud-native and traditional environmentsIdentify, scope, and manage ongoing incidents for our customers, developing remediation plans to improve security maturityImprove and maintain processes, tooling, documentation and training to mature and enhance cybersecurity incident responseDesign, implement and maintain monitoring systemsAssist our development and operations teams on improving our log monitoring capabilitiesTools and Technologies: Cloud-based environment (AWS), Datadog, AWS WAF, Infrastructure as Code, Terraform, KubernetesRequirements:Security operations experience, including alert triage, investigation, and incident responseExperience designing, building and maintaining monitoring and alerting systems from scratchProficiency in managing the incident lifecycle with the ability to handle multiple work streams concurrentlyUnderstanding of secure software development practices, including knowledge of common vulnerabilities such as OWASP Top 10.Effective communication skills to articulate complex technical issues to diverse audiences (IT professionals, executives, business decision-makers) in a clear, authoritative, and actionable mannerExperience in start-up/tech environment in a SaaS companyNice to Have:Familiarity with scripting languages (Python, Bash…) and APIsAwareness of cybersecurity standards and regulations such as NIST, CIS, ISO 27001, and PCI DSSA basic understanding of Forensic processes