Senior Information Security Analyst - CSIRT

Description

Job Summary: Bradesco is seeking a Cyber Security Engineer III to monitor, mitigate, and respond to security events, ensuring the protection of assets and information. Key Highlights: 1. Manage the CSIRT team, protecting assets and information 2. Monitor and mitigate security events in real time 3. Create and validate automated response workflows **About Bradesco** Bradesco is one of Brazil's largest financial groups, with a history marked by pioneering spirit and innovation. Through our broad portfolio of financial products, banking services, and insurance solutions, we contribute to individuals' aspirations and the sustainable growth of businesses and society. Join our financial ecosystem and impact the experience of millions of people! At Bradesco, we value diversity in all its forms. Therefore, our job openings are open to everyone, regardless of gender, race, sexual orientation, disability, age, or any other characteristic. Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties** What is our Cyber Security team? We are dedicated to protecting assets, information, and our employees. We proactively identify and mitigate risks, respond rapidly to incidents, and promote a security culture across the organization. Our commitment is to the integrity, confidentiality, and availability of corporate resources, ensuring business continuity and customer trust. Work model: Hybrid \- 3 days onsite Unit: Osasco \- SP **Your day-to-day responsibilities** As a Cyber Security Engineer III, you will work within the CSIRT management team, with primary responsibilities including: * Monitor and mitigate real-time security events via SIEM, SOAR, EDR, NDR, XDR, IPS, WAF, Anti\-DDoS, and other tools; * Identify suspicious patterns and anomalous behavior; * Support development of use cases for monitoring critical incidents; * Prioritize and validate alerts, classifying incidents by type (e.g., malware, phishing) and priority level (P0, P1, P2, P3\); * Monitor IT assets to detect absence of security controls, such as EDR; * Record initial evidence and participate in post-mortem processes; * Actively participate in and orchestrate conferences related to complex security incidents and system outages alongside IT Operations; * Create and validate automated response workflows via SIEM/SOAR (incident response automation). **Requirements and Qualifications** What do you need to have or know? * Bachelor's degree in Computer Science, Engineering, Information Security, or related fields; * Proven experience in security incident response and analysis; * Advanced knowledge of security tools (e.g., IPS, EDR, NDR, XDR, SIEM, SOAR, WAF, Anti\-DDoS solutions); * Ability to interpret logs, metadata, and network packets; * Knowledge of ISO/IEC 27001/27035 standards; * Familiarity with leading industry frameworks such as NIST and SANS; * Technical English proficiency for reading documentation. It is a plus if you have: * Cybersecurity certifications (e.g., GCIH, CSA, CompTIA Security\+/CySA\+, CCFR, AZ\-200, AWS SOA\-C02\); * Advanced experience in SOC, CSIRT, Blue Team, or peer areas (CTI, Threat Hunting); **What We Offer** At Bradesco, we value health and well-being, offering an extensive portfolio of benefits to all our employees: * Profit Sharing (PLR) or Bonus: Based on position eligibility\* * Health Insurance * Dental Insurance * Life Insurance * Food Allowance * Meal Voucher * 13th Food Basket * Total Pass * Transportation Voucher (optional enrollment) * Discounts on products and services from partner companies * Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) * Viva Bem Bradesco: health, well-being, and quality-of-life program * Unibrad: Bradesco Corporate University * Fee Waivers: special conditions on various products and services * Daycare or Babysitter Assistance * Extended Paternity Leave of 20 days * Maternity Leave of 180 days, including pregnancy support and postpartum assistance