Grupo QuintoAndar | Senior Security Engineer - CSIRT
Core
Technical focal point and core pillar for the CSIRT team, orchestrating defense and leading the complete incident response lifecycle from analysis to eradication.
Role type
Senior Security Engineer (CSIRT)
Builds
Incident response playbooks, forensic investigations, and actionable threat intelligence.
Domain
Cybersecurity, Incident Response, Digital Forensics
Required skills
Incident Response, Digital Forensics, Threat Hunting, Memory Forensics, Host-Based Forensics, Malware Analysis, Cloud Incident Response (AWS/GCP), SOAR automation, Risk Management
Preferred skills
Cross-functional coordination, Vendor Management, Threat Intelligence lifecycle
Technologies
SIEM, EDR, SOAR, AWS, GCP
Responsibilities
Lead Level 2 and Level 3 security incidents; Coordinate with MSSPs and 24/7 SOC; Develop and refine IR playbooks; Conduct DFIR and Root Cause Analysis; Tune threat detection rules in SIEM/EDR; Manage Tier 1/Tier 2 vendors.
Seniority
Senior, hands-on IC