Worked on incident investigation and response, event correlation, SIEM (Wazuh/Zanshin) operations, vulnerability management, hardening, and endpoint solution administration (Microsoft Defender). Implemented controls (ISO 27001, NIST, CIS), managed privileged access, handled onboarding/offboarding, governance (GMUD), and documented policies, procedures (POPs), and response plans. Provided security support for Microsoft 365 and Intune. Analytical profile, hands-on, and focused on mitigation \& continuous improvement. Requirements: * Experience in incident investigation, log analysis, and event correlation. * Experience in incident response (detection, containment, mitigation, eradication, and post-incident activities). * SIEM and monitoring tool operations (Wazuh, Zanshin, or similar). * Knowledge of vulnerability management (Nessus, Qualys, OpenVAS), CVE interpretation, and risk prioritization. * Ability to implement controls based on ISO 27001, NIST CSF, and CIS Controls. * Experience with PAM (privileged access management) and password vaults. * Execution of onboarding and offboarding of access in corporate environments. * Application of the principle of Least Privilege, access reviews, and RBAC. * Knowledge of server and endpoint hardening per CIS Benchmarks. * Administration of EDR/AV solutions (Microsoft Defender or equivalents). * Security support for Microsoft 365 and Intune (MFA, Conditional Access, Secure Score, DLP).
João Silva
Indeed · HR
João Silva
Indeed · HR
