Senior Cybersecurity Analyst (CSIRT)

Description

Job Summary: Senior Cybersecurity Analyst (CSIRT) to lead security incident response, with a focus on quality and agile development, within a team that values creativity and innovation. Key Highlights: 1. Lead technical incident response activities 2. Conduct advanced investigations and digital forensic analysis 3. Enhance playbooks, runbooks, and processes **\#JoinUs** Join is seeking a **Senior Cybersecurity Analyst (CSIRT)** to join a team dedicated to delivering excellence! At Join, we believe software built for people transforms businesses; therefore, our Recruiting team is always attentive to identifying individuals who will help us achieve this goal. As a **Senior Cybersecurity Analyst (CSIRT)**, you will join a squad focused on quality, creative processes, and agile development. **Hybrid role! We welcome candidates from Brasília/DF, Campinas/SP, and Rio de Janeiro/RJ \=D** **Responsibilities and Duties** In your day-to-day work, we expect you to handle the following processes: * Lead technical incident response activities; * Conduct advanced investigations and digital forensic analysis; * Perform root cause analysis; * Define containment, eradication, and recovery strategies; * Identify attack vectors and techniques used; * Ensure evidence preservation; * Prepare technical and executive reports; * Serve as the technical point of contact during critical incidents; * Support less experienced analysts; * Enhance playbooks, runbooks, and processes; * Collaborate with technical teams on remediation; * Conduct incident simulations; * Propose improvements and automation. **Requirements and Qualifications** What’s needed for our perfect match: * Bachelor's degree in Computer Science, Systems Analysis, Information Systems, or related fields. * Solid experience in Information Security Incident Response (IR); * Advanced knowledge of network protocols (TCP/IP, DNS, HTTP/S); * Proficiency in Windows and Linux operating systems, with emphasis on artifact analysis; * Experience with security and investigation tools (EDR, SIEM, digital forensics); * Experience in log analysis and event correlation; * Familiarity with frameworks such as NIST SP 800\-61, SANS, and MITRE ATT\&CK; * Experience in digital forensics (disk, memory, and artifacts); * Knowledge of attack techniques (lateral movement, privilege escalation, persistence, and data exfiltration); * Experience in virtualized environments; * Knowledge of public and private cloud environments. Desirable: * Proven CSIRT experience; * Experience handling complex incidents (ransomware, APT, identity compromise, data breaches); * Knowledge of threat hunting and threat intelligence; * Experience with forensic tools and malware analysis; * Experience with ITSM platforms; * Advanced technical English. Certifications (desirable): * GCFA, GCIH, GNFA, CHFI or equivalent; * CompTIA Security\+; * ISO/IEC 27001; * SANS certifications (SEC504, SEC508 or similar). **Additional Information** Birthday Day Off – with a surprise! Training and certification incentives; Access to Alura; Partnership with FIAP; Referral Bonus Program; Health Insurance; Dental Insurance; Vittude \- mental health platform; Wellhub \- for physical wellness; New Value \- discount coupons; SESC; Meal and/or food allowance. Today, we are witnessing a silent revolution — happening everywhere, without borders or leaders. Restless minds joining this movement wherever they are, at any time. Shaping a future free of hierarchies and boundaries — free, creative, technological. The freedom that inspires us to live a more balanced life. The creativity that awakens us to think differently. And technology that unites us — not merely connecting, but solving real problems. Join this movement. Join the community of visionaries and be the change, be the inspiration, be the force shaping the world. After all, we are stronger together. Join, EVERYWHERE. **WHAT DRIVES US**: Being creative in every challenge **OUR MISSION**: Empowering freedom through technology, facilitating interactions and bringing relationships closer **WHO WE ARE**: We build technology projects with a creative and distinctive perspective. **PERSONALITY**: Fun, committed, independent, and inquisitive **OUR AUDIENCE**: Talents and organizations aiming to move beyond the ordinary and bring extraordinary things into the world. **Creativity Awakens Us** Thinking differently about real-world problems keeps us alert and awake. **Freedom Renews Us** It keeps us in a constant state of ENTHUSIASM, free from routines that demotivate us. **Balance Strengthens Us** Work-life balance makes us more powerful and inspired. **Relationships Energize Us** Human-centered relationships exist regardless of physical presence — and this must always be remembered.