Senior Security Engineer - Blue Team
Summary
Second engineer on Loadsmart's Blue Team: leads security incidents end-to-end, owns the incident response process, and builds/tunes Datadog Cloud SIEM detections across AWS, Kubernetes and Google Workspace. Automates with Python and Terraform and mentors engineers. Remote anywhere in Brazil.
In this role, you will lead our response to security incidents and help strengthen our defensive security program. We are seeking an experienced, goal-driven Senior Security Engineer who thrives in a dynamic and fast-paced global company. As the second engineer on our Blue Team, you will partner with our current Blue Team engineer and with engineering squads across product and platform engineering to detect threats early, respond fast, and keep our applications and infrastructure safe and compliant.
DEPARTMENT: Engineering
LOCATION: Remote anywhere in Brazil
WHAT YOU GET TO DO:
-
Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.
-
Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.
-
Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.
-
Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.
-
Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.
-
Automate detection and response tasks with Python and Terraform.
-
Report on incidents and security posture to engineering leadership, and mentor engineers across squads.
REQUIRED QUALIFICATIONS:
-
5+ years of experience in Blue team / Defensive security / Security operations.
-
Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.
-
Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.
-
Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.
-
Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.
-
Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.
-
Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.
Skills
As published by lever · 14 questions · 5 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website, What is your age range?, I identify my ethnicity asSelect all that apply, What gender do you identify as?, Are you a veteran or current military service member?, Are you a member of any underrepresented groups? (e.g., LGBTQ+, Religious minorities), Do you have a dissability? The ADA defines a person with a disability as someone with a physical or mental impairment that substantially limits a major life activity, has a record of such an impairment, or is regarded as having such an impairment.
Pick from a list (9)
- We like to know where great talent comes from. Please select the option that best applies to how you heard about our company or this opportunity.
- Are you located in Brazil?
- How do you classify your English, including speaking?
- Do you have experience using English in the work environment?
- Are you able to work as an Independent Contractor?
- Have you led multi-disciplinar incident responses in the past 6 months?
- What is your level of experience with AWS?
- What is your level of experience with Google Workspace?
- What is your level of experience with any form of SIEM?
Written answers (5)
- Where are you located?
- What is your salary expectation as Independent Contractor? (Please add in Reais per year)
- How many years of experience do you have with blue team/secops/defensive security?
- List AI security projects you have been conducting currently. No need for specifics or sensitive information.
- Let us know why you are interested in Loadsmart and this position.