CAS | IT Security Operations Specialist (SecOps)

Role Summary

We are looking for people who are driven by technical challenges, who identify with a dynamic and diverse environment, and who combine technical depth with business vision to act as a specialized reference in the security operation of an S2 financial institution.

The position acts as a technical reference (specialist track) in the Security Operations Management (SecOps), technically leading complex projects, defining standards, architectures and cyber protection strategies and guiding teams in adopting the best market practices. It operates integrated with the 1st line of defense and in conjunction with the Security Architecture/CoE and the 2nd line (CISO), with scope in Security Architecture, definition of standards, strategic projects, complex risk assessment, specialized technical consultancy and technological evolution.

It will focus on security engineering, which aims to absorb project handovers and technological evolution coming from the 2nd line and Architecture in a structured way, preventing engineering from competing with day-to-day operational demands.

The central challenge is to raise the technical security standard and sustain the evolution towards a proactive and risk-based defense, oriented to market frameworks (NIST CSF 2.0, CIS Benchmarks and MITER ATT&CK), under the requirements of BACEN, CMN Resolution No. 5,274 and the LGPD. The position also has the potential to take on Coordination when the team is expanded.

• Technical reference and technological evolution
• Technically lead strategic security projects, defining corporate cyber protection architectures and standards;
• Assess technological risks associated with new initiatives and act as an internal consultant on complex topics;
• Promote innovation and the adoption of new protection technologies, developing technological evolution and maturity strategies;

Influence corporate decisions related to security, supporting baselines, hardening (CIS Benchmarks) and structural remediation of vulnerabilities proven in Red/White Team tests;

Technically guide analysts and coordinators on specialized topics (e.g.: IAM/PAM, cloud security, data protection, detection and response, AI Security);

Represent the organization before suppliers, audits and specialized technical forums.

• Compliance, risks and support
• Ensure adherence to applicable standards, policies and regulatory requirements (CMN Resolution No. 5,274, BACEN and LGPD);
• Support the root cause analysis of relevant incidents and the definition of solutions for highly complex problems;

Contribute to the production of technical evidence and the resolution of internal, external and regulatory audit notes.

• Higher education in Cybersecurity, Information Technology, Information Systems, Computer Engineering or related areas;
• Solid technical experience in Information Security and Cybersecurity, acting as an expert reference in one or more SecOps domains;
• Experience in large corporate environments; experience in the financial system is a relevant advantage;
• Technical mastery of security technologies: IAM/PAM/MFA, EDR/XDR, SSE, Cloud Security, ITDR, data protection and SIEM/SOAR integrations;
• Experience in vulnerability management, hardening (CIS Benchmarks), incident response and security architecture;
• Mastery of market frameworks: NIST CSF 2.0, CIS Benchmarks and MITER ATT
• Knowledge of the applicable regulatory framework: BACEN, CMN Resolution No. 5,274 and LGPD;
• Capacity for technical communication and influence, with a history of conducting projects and defining standards;

Advanced technical certifications desirable: CISSP, OSCP, GIAC (GCIH/GCIA/GPEN), CCSP and platform certifications (e.g.: CyberArk, CrowdStrike, public cloud).

Benefits

At Sicredi you will have

• 14th and 15th fixed salaries;
• Profit Sharing (according to seniority);
• Health and Dental Plan without co-participation,
• Wellbeing programs with Wellhub (formerly Gympass), Nutrition, Psychology, Labor, Massage, Running group and local gym;
• Food Voucher and Meal Voucher – with % flexibility on VA/VR cards, without co-participation;
• Extended maternity and paternity leave;
• Daycare or nanny assistance for children up to 6 years and 11 months;
• Assistance for disabled children, without age limit;
• life insurance,
• Private Pension up to 8% of salary;
• Training Platform – Sicredi Aprendi, with several courses;
• Workload of 40 hours per week – Using a time bank system;

Teleworking Allowance (except for positions that work 100% in person).