Cyber Security Engineer III

Description

Job Summary: Bradesco is seeking a Cyber Security Engineer III to work in the Threat Intelligence Management team, protecting assets, information, and employees through risk identification and mitigation. Key Highlights: 1. Work with threat intelligence and protection of digital assets. 2. Protect the integrity and confidentiality of resources. 3. Focus on analysis and contextualization of IOCs, TTPs, and OSINT. **About Bradesco** Bradesco is one of Brazil's largest financial groups, with a history marked by pioneering spirit and innovation. Through our broad and diversified portfolio of financial products, banking services, and insurance, we contribute to individuals' aspirations and the sustainable growth of businesses and society. Join our financial ecosystem and impact the experience of millions of people! Learn more at https://banco.bradesco/html/classic/sobre/index.shtm **Responsibilities and Duties** What is our Cyber Security team? We are dedicated to protecting assets, information, and our employees. We proactively identify and mitigate risks, respond rapidly to incidents, and foster a security culture across the organization. Our commitment is to the integrity, confidentiality, and availability of corporate resources, ensuring business continuity and customer trust. Work model: Hybrid – 3 days onsite Unit: Osasco-SP, Curitiba-PR, or Recife-PE. **What will your day-to-day look like?** As a Cyber Security Engineer III, you will work in Threat Intelligence Management, with the following main activities: * Collecting and monitoring intelligence; * Aggregating information from open sources (OSINT), paid feeds, communities, and partners; * Monitoring forums, the dark web, social media, and threat communication channels; * Validating and contextualizing IOCs (IPs, domains, hashes, URLs); * Associating IOCs with campaigns, known APT groups, or TTPs; * Identifying trends and evolution of attack techniques; * Enriching SIEM alerts with threat context; * Sharing inputs (e.g., IOCs and TTPs) with Detection Engineering for rule creation; * Creating tactical (short-term), operational (medium-term), and strategic (long-term) reports; * Automating intelligence ingestion, correlation, and dissemination. **Requirements and Qualifications** What do you need to have or know? * Completed undergraduate degree in IT or related fields; * Experience with tools such as MISP, ThreatConnect, Recorded Future; * Knowledge of MITRE ATT&CK, Diamond Model, and Kill Chain; * Analysis of IOCs and TTPs, and use of OSINT (Maltego, Shodan, etc.); * Production of technical and executive reports; * Automation using Python and integration of intelligence feeds. It’s a plus if you have: * Postgraduate degree in security or related fields; * GCTI (GIAC Cyber Threat Intelligence) – SANS; * CTIA (Certified Threat Intelligence Analyst) – EC-Council; * MITRE ATT&CK Defender (MAD); * Complementary certifications: CISSP, GCIH, CEH, CompTIA CySA+ **What we offer** At Bradesco, we value health and well-being, offering an extensive portfolio of benefits to all our employees: * PLR or Bonus: Based on position eligibility* * Health Insurance * Dental Insurance * Life Insurance * Food Allowance * Meal Voucher * 13th Food Basket * Total Pass * Transportation Voucher (optional enrollment) * Discounts on products and services offered by partner companies * Private Pension Plan (optional enrollment, with financial contribution from Bradesco Organization) * Viva Bem Bradesco: health, well-being, and quality-of-life program * Unibrad: Bradesco Corporate University * Fee Waivers: special conditions on various products and services * Daycare or Babysitter Assistance * Extended Paternity Leave of 20 days * Maternity Leave of 180 days, with assisted prenatal and postnatal care