Especialista em Wazuh | Cyber Security

Team: IT

Location: Brazil

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The role focuses on managing and evolving security monitoring solutions through Wazuh implementation, SIEM administration, threat detection improvements, and incident investigation support. The professional will work closely with security operations teams to improve visibility, reduce risks, and strengthen cybersecurity processes.

• Implement, configure, and administer Wazuh environments according to security monitoring requirements.
• Create, customize, and optimize detection rules, decoders, and event correlations.
• Perform alert tuning activities to reduce false positives and improve detection accuracy.
• Analyze security events, logs, and alerts to support incident investigations.
• Configure and maintain Wazuh agents across Windows and Linux environments.
• Integrate Wazuh with other cybersecurity tools and platforms.
• Support the evolution of monitoring use cases and SOC capabilities.
• Create dashboards and improve security visibility through effective reporting and analysis.
• Troubleshoot issues related to event collection, communication, and processing.
• Document configurations, procedures, improvements, and technical solutions.
• Support SOC operations by enhancing detection workflows and security monitoring maturity.

Requirements:

The ideal candidate is a cybersecurity professional with advanced experience in Wazuh, SIEM technologies, and security operations. The role requires strong technical knowledge, analytical thinking, and experience working with security events, detection engineering, and incident response processes.

• Advanced experience with Wazuh implementation, configuration, and administration.
• Experience managing and operating SIEM environments.
• Strong knowledge of creating and customizing detection rules and security correlations.
• Experience analyzing logs, alerts, and security events.
• Knowledge of Windows and Linux operating systems.
• Familiarity with security data formats and technologies such as:
  • JSON.
  • YAML.
  • Regex.
  • Syslog.
  • Experience investigating security alerts and supporting incident response activities.
  • Understanding of SOC operations, Blue Team practices, and cybersecurity monitoring concepts.
  • Ability to troubleshoot technical issues and improve security processes.
  • Experience with security frameworks, monitoring tools, and threat analysis is highly valued.

  Nice-to-have qualifications:

  • Experience with SIEM platforms such as IBM QRadar, Elastic Stack, Splunk, or Microsoft Sentinel.
  • Knowledge of MITRE ATT&CK, Threat Intelligence, EDR/XDR, and Vulnerability Management.
  • Understanding of infrastructure technologies, including networks, firewalls, cloud environments, and containers.
  • Experience developing automation scripts using Python, Bash, or PowerShell.

  Benefits:

  • Fully remote work model.
  • PJ contracting model with immediate availability.
  • Structured career development plan with periodic reviews.
  • Support for technical courses and professional certifications.
  • Online healthcare support, including telemedicine, specialists, nutrition, and psychology services.
  • Life insurance.
  • Accounting support for MEI professionals.
  • Birthday day off.
  • Additional paid leave after one year.
  • Opportunity to work with advanced cybersecurity technologies and real-world security projects.