Staff Security Engineer responsible for implementing defensive security controls at Creditas. Joining a team focused on protecting clients through technological solutions.
Responsibilities
Work hands-on to implement, operate and evolve defensive security controls, focusing on endpoints (Windows, Mac, Linux);
Conduct detection and incident response activities, including technical analysis and defining containment and remediation plans;
Operate and maintain DLP, SWG, antivirus and EDR solutions;
Support the definition and implementation of security baselines in workplace environments;
Collaborate with internal service desk and access management teams to reinforce security practices, prioritizing automation and scalability;
Participate in the development and maintenance of operational security playbooks, metrics (KPIs) and risk indicators;
Evaluate new technologies and propose solutions to strengthen the company's security posture;
Support audit and compliance processes, when applicable, ensuring alignment with relevant standards and frameworks (ISO 27001, NIST, SOC 2, among others).
Requirements
Strong knowledge of defensive security, endpoint protection and incident response;
Hands-on experience with DLP, SWG, antivirus, EDR, SIEM and SOAR solutions;
Experience in hardening and vulnerability management on Windows, Mac and Linux environments;
Broad knowledge of cybersecurity, including cloud security, identity and risk management;
Ability to work hands-on and to provide technical guidance to less experienced colleagues;
Availability for a hybrid work model: you are required to attend our office in the Morumbi area of São Paulo once a month for four consecutive days, usually during the last or first week of the month (Creditas in Person).
Benefits
Health insurance (Alice)
Dental insurance (SulAmérica)
Wellz: 100% free therapy sessions
Wellhub: access to gyms and studios
Creditas Endurance: incentive program for high-impact sports
Pharmacy discount program (Univers)
Life insurance (Porto Seguro)
Birthday day off
Extended parental leave: 6 months for birthing parents and 35 days for non-birthing parents
Family Care: maternity and paternity support program
Childcare allowance
Allowance for dependents with disabilities (PWDs)
SESC: access to facilities for you and your dependents
Cybersecurity Governance expert managing cybersecurity efforts for international logistics and services company. Enhancing frameworks, reporting, and conducting gap analyses and pen tests.
Head of IT Infrastructure and Security managing strategy and operations for banking IT service. Leading expert teams in IT security, infrastructure, and modernization with a focus on high availability.
Activity Security Representative providing multi - disciplined security support for Collateral and Special Access Programs. Responsibilities include document control, inbound and outbound mail processing, and personnel security maintenance.
Cybersecurity Advisor supporting Rapid7’s Managed Services and improving customer security posture. Engaging with clients to provide incident response and advisory relationships while leveraging technical knowledge.
Senior Cybersecurity Incident Responder leading response efforts to complex attacks globally for TransUnion. Collaborating with teams responsible for incident response in cloud and other environments.
Manager of Security Engineering leading teams focused on SIEM solutions for cybersecurity. Overseeing data pipelines and fostering an inclusive engineering culture at Vanguard.
Application Security Specialist at Vanguard plays a pivotal role in securing software development lifecycle. Develop strategies for technology security, ensure compliance, and maintain security tools in CI/CD pipeline.
Cybersecurity Program Manager driving enterprise - wide security programs for healthcare payments company. Collaborating with cross - functional teams to execute cybersecurity strategy and mitigate risk.