Security Analyst - Blue Team / SecOps

Description

**We are looking for a new person to join our Tech team as a** **Security Analyst \- Blue Team / SecOps** **!** Can you imagine being part of one of the largest restaurant technology companies in Brazil? We serve over **19,000 customers** nationwide and are the **market leader in cloud-based management software** for the foodservice industry! Additionally, we are one of iFood’s **Super Integrators**, delivering a complete solution — from **Point of Sale to Back Office**. Amazing, right? And there’s more: **iFood is our investor!** This means we’re experiencing exponential and accelerated growth — which is why we want people who share our energy, our drive to innovate, and our ambition to revolutionize the food service market — growing alongside us!  **Responsibilities and Duties** **What will be part of your day-to-day** * Monitor security alerts, triage events, and conduct initial investigations into potential incidents. * Conduct initial forensic analysis on incidents: evidence preservation, timeline construction, and identification of the entry vector. * Manage the full post-incident lifecycle: root cause analysis, lessons learned, and tracking of corrective actions. * Track operational security metrics: MTTD, MTTR, alert volume, and false positive rate. * Build and document the incident response plan. * Develop and maintain playbooks and runbooks for key incident scenarios; configure and operate centralized logging. * Support audits and organize evidence to ensure and enhance security maturity. * Contribute to phishing simulation programs and security awareness initiatives. **Requirements and Qualifications** **What we expect from you** * Practical experience with AWS security services: CloudTrail, GuardDuty, CloudWatch, VPC Flow Logs, and AWS Config. * Knowledge of incident response frameworks — NIST IR, SANS PICERL, or equivalent — with practical application, not just theoretical understanding. * Ability to conduct initial forensic analysis: evidence collection and preservation, log analysis, timeline reconstruction. * Experience creating operational playbooks and runbooks — documentation that works under pressure, not only in controlled environments. * Familiarity with common MITRE ATT\&CK TTPs and ability to identify indicators of compromise in logs and alerts. * Skill in communicating incident status clearly and accurately to both technical and executive audiences. * Readiness: Speed and Efficiency Under Pressure. * Critical Thinking and Investigative Mindset. * Proactivity: Anticipating Threats. * Clear Communication During Crisis Situations. * Operational Discipline and Attention to Detail. * Multidisciplinary Collaboration. * Follow-through: Closing Loops and Documentation. **What will set you apart here** * Experience with SIEM — Splunk, Elastic SIEM, Microsoft Sentinel, or similar — for event correlation and detection rule creation. * Familiarity with SOAR (Security Orchestration, Automation and Response) and automation of incident response. * Knowledge of threat intelligence and IOC feeds applied to monitoring. * Experience in an environment with an external security partner. * Basic understanding of insider threat detection and anomalous user behavior. * Familiarity with network traffic analysis and packet capture tools. **Certifications — Preferred** * AWS Certified Security \- Specialty * GCIH \- GIAC Certified Incident Handler * Blue Team Level 1 (BTL1\) \- Security Blue Team * CompTIA CySA\+ **Additional Information** **Liked it? Calm down — there’s more!** Here, you’ll also enjoy: **PJ Contract** with **30 days of paid leave** **Health insurance with 100% company-paid monthly fee** *(for PJ after 6 months)* **Dental insurance** *(for PJ after 6 months)* **Life insurance** **** **Complete equipment kit** **Home Office Allowance —** R$180.00/month **Birthday Day Off** **Gympass discount** **No dress code** — be yourself! **Extended maternity and paternity leave** We are a SaaS technology company and the **Brazilian leader in food service management**. More than just software, we are strategic partners to over **15,000 establishments**, helping each business optimize processes, reduce costs, and increase sales. **We’re passionate about simplifying life for those living the daily reality of restaurants — and we do it through agility, intelligence, and education!** We operate **comprehensively**, integrating management needs into a single platform and accelerating the digital transformation of restaurants, bars, and delivery services across the country. We are **backed by iFood**, and we’re growing rapidly, empowering thousands of operations. Here, you’ll find a team passionate about technology, autonomy, and innovation — with real impact on our customers’ day-to-day. If you seek **challenges**, **growth**, and the chance to help **build something big**, **Saipos** is **your place!**