Senior Security Analyst

Remoto
Tempo inteiro
Sénior

Descrição

As a Senior Security Analyst focused on Incident Response, Threat Intelligence, and Threat Hunting, you will play a critical role in defending OutSystems' digital assets and global operations. You will lead and support complex investigations, proactively detect threats, and help drive strategic improvements in our security operations capabilities. This is a senior, hands-on technical position within a 24/7 global SOC, requiring deep expertise in attacker TTPs, proactive threat detection, and incident management.

You will own complex incident investigations end-to-end, from detection to containment and remediation, while continuously hunting for anomalies and threats across on-premises and cloud environments. You'll monitor global threat actor activity, transform raw intelligence into actionable defense strategies, and collaborate with engineering and DevSecOps teams to improve detection coverage and automate response processes.

You'll develop and maintain incident response and threat hunting playbooks, identify capability gaps, and contribute to strategic improvements in detection, response, and threat modeling. Strong communication skills are essential, as you'll translate technical findings into clear, actionable insights for both technical and non-technical audiences, including stakeholder and executive teams.

Competências

MITRE ATT&CK Framework
Cyber Kill Chain
SIEM (Splunk, Sentinel, QRadar)
EDR
Python
PowerShell
KQL
YARA
AWS
Azure
Log Analysis
Forensic Tools
Threat Intelligence Platforms (MISP, ThreatConnect)
Incident Response
Threat Hunting
Threat Intelligence
Root Cause Analysis
Detection Engineering

Responsabilidades

Own complex incident investigations end-to-end, from detection to containment and remediation, and conduct root cause analysis
Continuously hunt for anomalies and threats across on-premises and cloud environments using threat intelligence, analytics, and behavioral patterns
Monitor global threat actor activity and transform raw intelligence into actionable defense strategies
Collaborate with engineering and DevSecOps teams to improve detection coverage, enrich SIEM use cases, and automate response processes
Develop, optimize, and maintain incident response and threat hunting playbooks
Identify gaps and suggest improvements to contribute to capability building for detection, response, and threat modeling