MDR Information Security Analyst

Description

Job Summary: We are seeking an experienced MDR Information Security Analyst to support the sales team with technical expertise and solution alignment. Key Highlights: 1. SIEM event monitoring and analysis (IBM QRadar) 2. Experience in security incident response and forensic investigation 3. Support for audits and compliance with standards (ISO 27001, NIST, LGPD) We are seeking an experienced and highly qualified professional for the role of MDR Information Security Analyst. This position is essential to support the sales team with technical expertise and ensure optimal alignment between offered solutions and customer needs. Requirements: **Responsibilities:** * Monitor events and alerts in SIEM (IBM QRadar) and other log analysis and correlation platforms. * Perform log analysis, event correlation, and security incident investigation. * Conduct incident response (containment, mitigation, and recovery). * Prepare weekly and monthly reports for clients and internal management. * Develop correlation rules, use cases, and fine-tune SIEM solutions. * Collaborate with internal teams (SOC, NOC, Endpoint, Connectivity, Infrastructure) and clients, ensuring clear and objective communication. * Support audits and compliance with standards such as ISO 27001, NIST, and LGPD. **Technical Requirements:** * Proven experience with SIEM (preferably QRadar; knowledge of other platforms is valued). * Knowledge of MDR, log analysis, networking, and security protocols. * Experience in security incident response and basic forensic investigation. * Familiarity with security tools such as EDR, corporate antivirus, DLP, firewall, etc. * Understanding of frameworks such as MITRE ATT\&CK. * Technical English proficiency for reading documentation. Possession of one of the following certifications: EC\-Council Certified Network Defender (CND) / EC\-Council Certified Incident Handler (ECIH) / EC\-Council Certified Ethical Hacker (CEH) / EC\-Council Certified SOC Analyst (CSA) / CompTIA Security\+ / GIAC Security Essentials (GSEC) / ISC2 Systems Security Certified Practitioner (SSCP); Desirable: one of the following certifications: Offensive Security Certified Professional (OSCP) / Offensive Security Exploitation Expert (OSEE) / Offensive \- Security Certified Expert 3 (OSCE3\) / EC\-Council Penetration Testing Professional (CPENT) / GIAC Penetration Tester (GPEN) / GIAC Web Application Penetration Tester (GWAPT) / CompTIA PenTest\+ / Certified Information System Security Professional (CISSP) / GIAC Certified Incident Handler (GCIH) / GIAC Certified Enterprise Defender (GCED) / EC\-Council Hacking Forensic Investigator (CHFI) / CompTIA Cybersecurity Analyst (CySA\+)