




Job Summary: Junior Cybersecurity Analyst to perform threat surveillance, security event analysis, and incident response, learning from experienced professionals at the CTU. Key Highlights: 1. Working in a multidisciplinary team focused on threat surveillance and incident response (IR) 2. Mentorship from experienced professionals to support technical growth 3. Participation in incident investigation and response JUNIOR INFORMATION SECURITY ANALYST Country: Brazil **Junior Cybersecurity Analyst – CTU (Threat Surveillance \& Incident Response)** **Technical Level** A junior professional with interest or initial experience in threat surveillance operations, security event analysis, and incident response within corporate environments, preferably in the payment systems or technology sector. Works alongside the CTU (Cyber Threat Unit), participating in multidisciplinary teams, focusing on learning, executing defined detection and response procedures, supporting incident investigations, and enhancing technical skills under guidance from experienced professionals. **Responsibilities** * Monitor security alerts and events using SIEM and EDR/XDR platforms under supervision to identify potential threats, suspicious activities, and anomalous behavior. * Assist in initial alert and vulnerability triage reported from various sources, updating records and escalating to responsible teams (Level 2/3\) based on severity. * Support collection and organization of information for incident response, contributing to recordkeeping, documentation of procedures, and evidence segregation. * Follow documented playbooks and procedures for incident containment, initial communication, and escalation. * Collaborate in internal incident simulation exercises and detection testing, guided by senior teams. * Support preparation of operational reports covering performed activities, resolved alerts, and basic metrics (volume, types, response time). * Attend internal CTU meetings, interacting with operational areas and squads, always accompanied by more experienced professionals. * Perform routine maintenance and updates to incident response playbooks and detection content under guidance. * Contribute to IR process compliance and governance, ensuring records are complete, accurate, and stored securely. **Required Knowledge** * Prior experience or internship in SOC/NOC, technical support, or IT security-related areas is desirable. * Basic understanding of SIEM, EDR, antivirus, or other security monitoring tools. * Familiarity (even theoretical) with log analysis, cyber threats, incidents, vulnerabilities, and fundamental security controls. * Introductory knowledge of frameworks such as MITRE ATT\&CK and NIST, as well as awareness of security best practices (OWASP, CIS Controls). * Ability to follow processes, clearly document information, collaborate effectively, and learn from more experienced professionals. * Basic technical English for reading alerts, procedures, and documentation.


