Senior Security Engineer - Blue Team
At a glance
Senior Security Engineering role at Loadsmart. Remote, Brazil · contract.
Pay not stated Security Engineer salary
remoteroles summary, based on the employer's posting.
What you'll do
- Take security incidents from initial triage through containment, recovery, communication and lessons learned
- Maintain response playbooks, severity guidance, on-call routines and practice exercises with engineering and IT
- Create and refine Datadog Cloud SIEM detections for AWS, Kubernetes and Google Workspace activity
- Examine cloud, identity and workload logs, preserving evidence and turning cloud security findings into tracked engineering work
- Automate security response with Python and Terraform, brief engineering leaders, and coach engineers across squads
What you bring
- At least five years in blue-team, defensive security or security operations work
- You have led incident response through post-incident review and follow-up, and handled cloud evidence and forensics
- You have built SIEM alerts aligned with MITRE ATT&CK, CIS or NIST, and secured AWS and Kubernetes, including IAM and SSO reviews
- You can automate security work with Python or Bash and manage infrastructure as code with Terraform
- You have led security processes across teams, mentored engineers, and communicate fluently in English for daily work
Who this fits
This senior contractor role suits an experienced blue-team engineer who can lead incident response and work across engineering squads. It is remote, with applicants required to be based in Brazil.
From the employer
In this role, you will lead our response to security incidents and help strengthen our defensive security program. We are seeking an experienced, goal-driven Senior Security Engineer who thrives in a dynamic and fast-paced global company. As the second engineer on our Blue Team, you will partner with our current Blue Team engineer and with engineering squads across product and platform engineering to detect threats early, respond fast, and keep our applications and infrastructure safe and compliant.
DEPARTMENT: Engineering
LOCATION: Remote anywhere in Brazil
WHAT YOU GET TO DO:
-
Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.
-
Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.
-
Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.
-
Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.
-
Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.
-
Automate detection and response tasks with Python and Terraform.
-
Report on incidents and security posture to engineering leadership, and mentor engineers across squads.
REQUIRED QUALIFICATIONS:
-
5+ years of experience in Blue team / Defensive security / Security operations.
-
Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.
-
Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.
-
Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.
-
Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.
-
Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.
-
Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.