Accountabilities

Serve as the primary point of contact between Americas IT Operations teams and the global Cyber Defense Center for cybersecurity incident management.

Coordinate the complete security incident lifecycle, including triage, investigation, containment, eradication, recovery, escalation, and post-incident reviews.

Manage regional security incidents from detection to closure, ensuring compliance with global response procedures and identifying operational gaps.

Maintain clear and timely communication with technical teams, regional stakeholders, senior management, and executive leadership throughout incident investigations.

Develop a comprehensive understanding of regional business units, IT environments, operational workflows, technology dependencies, and security risks.

Conduct digital forensic investigations while ensuring proper evidence collection, preservation, integrity, chain of custody, and documentation.

Perform security analysis across Windows, Linux/UNIX, cloud, network, email, endpoint, and enterprise technology environments.

Investigate security alerts, system logs, threat intelligence, incident tickets, and reports using SIEM platforms and other security operations tools.

Prepare detailed investigation findings, incident briefings, risk assessments, and post-incident reports for both technical and non-technical audiences.

Monitor emerging AI-enabled cyber threats and defensive technologies, including deepfakes, automated phishing, adversarial machine learning, response automation, and AI-assisted threat intelligence.

Develop and continuously improve incident response playbooks, operational procedures, runbooks, security tools, and service improvement initiatives.

Mentor junior incident responders, share technical expertise, and contribute to strengthening regional cybersecurity capabilities.

Requirements

Strong professional experience in cybersecurity incident response, security operations, incident coordination, containment, recovery, and post-incident analysis.

Hands-on expertise in digital forensics, evidence handling, chain of custody, log analysis, threat intelligence, and investigative documentation.

Experience working with SIEM platforms, security monitoring solutions, email security tools, ticketing systems, and enterprise security operations processes.

Broad technical knowledge of enterprise IT environments, including Windows, Linux/UNIX, directory services, AWS, Azure, mobile device management, virtualization, networks, web servers, databases, and firewalls.

Proficiency in at least one programming or scripting language, such as Python, PowerShell, or Bash.

Understanding of security controls, security operations, risk management, and enterprise information security governance.

Familiarity with artificial intelligence and machine learning concepts, particularly their application to cyber threats, detection, response automation, and defensive security technologies.

Excellent analytical thinking, problem-solving, prioritization, and decision-making abilities, especially when managing high-impact security incidents.

Strong written and verbal communication skills, with the ability to present complex technical findings and brief senior management and executive stakeholders.

Proven ability to collaborate effectively across international, multicultural, and geographically distributed teams.

Fluency in English, both written and spoken.

Preferred qualifications:

Professional certifications such as CISSP, GCIH, GIAC, CISA, CISM, CompTIA CySA+, or equivalent cybersecurity credentials.

Experience with cloud incident response and cloud-native security tools in AWS or Azure environments.

Knowledge of enterprise security governance frameworks and global information security policies.

Familiarity with privacy and regulatory requirements across the Americas, including Brazil's LGPD, US state privacy laws, and Canadian privacy regulations.

Relevant training or certifications in artificial intelligence or machine learning security.

Knowledge of Spanish or Portuguese in addition to English.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1