Junior Cybersecurity

To reinforce Sonae Arauco’s current Cyber Security team, we are recruiting a Junior Cyber Security Analyst with the following profile:

Responsibilities

• Analyze and investigate alerts escalated by the SOC: triage, validation, and classification of incidents; determine impact and scope.

• Correlate events and perform investigations using platforms such as Microsoft Security, EDR/XDR (e.g., CrowdStrike), and network/endpoint logs.

• Support incident response activities: evidence collection, data preservation, and basic forensic analysis (memory, logs, traffic).

• Assist in the tuning and maintenance of detection rules in SIEM, EDR, and IDS/IPS; propose improvements to reduce false positives.

• Collaborate on the development and update of incident response playbooks; implement simple automations.

• Produce technical investigation reports and status dashboards; prepare communications for stakeholders when required.

• Participate in post-incident reviews, identifying root causes, mitigation measures, and lessons learned.

• Work closely with OT/IT teams to ensure that security measures are suitable for industrial environments (network segmentation, IoT/OT asset control).

• Contribute to the continuous strengthening of the SOC (documentation, detection testing, simulation exercises).

Profile

• Bachelor’s degree in Cybersecurity, Computer Engineering, Networks, or equivalent areas; or relevant hands-on experience in SOC/security engineering.

• Proven experience (1–3 years) in Cyber Security teams, preferably in incident response, security monitoring, or security engineering.

• Knowledge of vulnerability management and patching processes.

• Familiarity with EDR/XDR tools (e.g., CrowdStrike), SIEM solutions (e.g., Microsoft Sentinel), and detection frameworks (MITRE ATT&CK).

• Solid understanding of networks, protocols, and log analysis.

• Basic scripting skills (Python, PowerShell, Bash) for task automation.

• Experience with rule tuning and integration of security solutions.

• Experience with cloud environments (Azure, AWS) – valued.

• Proficiency in Portuguese and English (spoken and written) is essential for technical communication and collaboration with global teams.

• Valued certifications: CompTIA Security+, CySA+, GCIH, GCIA, Azure Security Engineer (not mandatory).

• Experience in industrial environments (OT/IoT) or with MSSPs – valued.

• Analytical, communicative, and proactive profile, with the ability to work under pressure and as part of a team.