Especialista em Resposta a Incidentes | CSIRT
Core
Lead technical investigations and response for security incidents impacting the corporate environment of C6 Bank, from identification and containment to eradication and lessons learned.
Role type
Senior Incident Response Specialist (CSIRT)
Builds
Efficient incident response processes, playbooks, and threat intelligence capabilities for a financial institution.
Domain
Cybersecurity / Financial Services
Required skills
Incident response, security investigation (endpoints, networks, apps, cloud), EDR/SIEM/SOC tools, MITRE ATT&CK/NIST/CIS frameworks, Python/PowerShell/Shell scripting, malware analysis, reverse engineering, Windows/Linux/macOS
Preferred skills
Digital forensics, threat hunting, incident response automation, regulated financial environments
Technologies
EDR, DLP, WAF, SIEM, CASB, email security platforms, Python, PowerShell, Shell Script
Responsibilities
Act as technical reference for complex investigations; support SOC in advanced analysis and decision-making; investigate and conduct security incidents in corporate, cloud, and SaaS environments; perform root cause analysis, containment, eradication, and recovery; create technical and executive incident reports; conduct research on new threats and malicious techniques; develop and improve response playbooks and processes; propose improvements for detection and response maturity; automate operational activities via scripts and workflows; create and maintain documentation and response plans; participate in simulation exercises and post-incident reviews.
