Please submit your resume in English.

To learn more about our team and office culture in São Paulo, Brazil, visit the following links. 
Careers Page: https://www.knowbe4.com/careers/locations/sao-paulo
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-S%C3%A3o-Paulo-Location-EI_IE969384.0,7_IL[…]M_-C1lsxoZq7Cx8IriVE8MkrzuTmnJzqego77RAWZz9sqGt_55BflwYKpQeg
LinkedIn: https://www.linkedin.com/company/knowbe4/life/brazil/

KnowBe4 is seeking a Senior Information Security Analyst in Brazil to join our Security team! In this role, your primary focus will be proactive threat hunting, internal vulnerability assessment/penetration testing, and building custom security automations to ensure enterprise data and infrastructure remain safe

As our infrastructure evolves, you will play a critical role in bridging an internal coverage gap in threat hunting and penetration testing, solving root-cause security challenges, and collaborating with and mentoring global SOC team members across the US, UK, and Brazil.

Responsibilities:

• Threat Hunting & Penetration Testing: Conduct proactive threat hunting across cloud and hybrid environments, identify log coverage gaps, and perform internal vulnerability assessments and penetration testing to recommend system hardening and patching.
• Security Automation & Tooling: Build internal security tools and automated testing workflows using Python or Bash to parse complex logs, streamline forensic data collection, and integrate security APIs.
• Cloud Security & Incident Response: Conduct security reviews and audits of AWS cloud environments, act as lead investigator for complex security incidents, and optimize ElasticSearch SIEM alerts to minimize false positives.
• Strategic Security Operations: Move beyond routine alert triage to solve root-cause security problems, improving overall infrastructure resilience and security posture.
• SOC Leadership & Mentorship: Serve as a subject matter expert for junior and mid-level analysts, developing training materials, leading tabletop exercises, and providing technical guidance to elevate overall team readiness.

Requirements:

• Experience in Security Operations (SOC), Information Security, or a related technical role.
• SOC & Threat Hunting: Proven track record in active threat hunting, incident investigation, and building or maturing SOC operational components rather than solely triaging alerts
• Scripting & Automation: Strong hands-on proficiency in Python or Bash for log parsing, forensic data collection, and custom security tool development
• Cloud & Linux Fluency: Hands-on experience securing cloud infrastructure (AWS as the primary focus) and navigating Linux command-line interfaces
• SIEM Expertise: In-depth knowledge and practical experience configuring and customizing ElasticSearch SIEM for log collection and alert tuning
• Language: Fluency in technical English (written and spoken) to collaborate smoothly across global teams
• Cultural Fit: Personable, open communication style with authentic engagement, willingness to share personal context, and a collaborative spirit

• Experience participating in Capture The Flag (CTF) competitions, ethical hacking, or red/blue team testing.
• Personal GitHub repositories or open-source security projects.
• Exposure to multi-cloud environments (Azure or GCP)
• Relevant industry certifications or a degree in Information Security / Computer Science.