Descrição

• About the Job
• This role is a mid-senior level position that involves managing the life cycle of vulnerabilities, ensuring analysis, characterization, prioritization and communication of vulnerabilities, as well as monitoring of indicators and continuous improvement of associated processes.
• Responsibilities:
• Vulnerability Management: Involves identifying, prioritizing, and mitigating vulnerabilities in IT systems to prevent exploitation by attackers. It includes continuous scanning, patch management, and tracking vulnerabilities over time.
• Threat Analysis Based on Client's Industry: Tailored threat assessments based on the specific risks and cyber threats faced by the client's industry (e.g., finance, healthcare, technology), helping to focus on the most relevant security issues.
• Production of Indicators of Compromise (IOC): Creation of specific patterns (e.g., IP addresses, file hashes) linked to malicious activity to detect and respond to cyberattacks.
• Malware Reverse Engineering: Analyzing malicious software to understand its behavior, identify vulnerabilities, and develop defenses to protect systems from similar future attacks.
• Publication of Threat Analyses and Reports: Sharing detailed reports on key threats, vulnerabilities, and recommended actions with stakeholders to improve overall security and inform risk mitigation strategies.

• Key Skills:
• Higher Academic Training in Computer Engineering, Electrotechnical or equivalent experience.
• Proficiency with tools like Nessus, Qualys, OpenVAS, and Rapid7 for identifying and assessing vulnerabilities in IT systems.
• Knowledge in IPv4, IPv6, DNS.
• Knowledge in creating IOCs using tools like YARA, Sigma, or STIX/TAXII formats for sharing threat intelligence.
• Ability to exploit vulnerabilities.
• Ability to identify and manage risks.
• Ability to communicate and interpersonal relationships.
• Responsibility, proactivity, autonomy and dynamism.
• Critical and results-oriented thinking.
• Capacity for leadership and teamwork.