In this role, you will lead our response to security incidents and help strengthen our defensive security program. We are seeking an experienced, goal-driven Senior Security Engineer who thrives in a dynamic and fast-paced global company. As the second engineer on our Blue Team, you will partner with our current Blue Team engineer and with engineering squads across product and platform engineering to detect threats early, respond fast, and keep our applications and infrastructure safe and compliant.
DEPARTMENT: Engineering
LOCATION: Remote anywhere in Brazil
WHAT YOU GET TO DO:
-
Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.
-
Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.
-
Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.
-
Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.
-
Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.
-
Automate detection and response tasks with Python and Terraform.
-
Report on incidents and security posture to engineering leadership, and mentor engineers across squads.
REQUIRED QUALIFICATIONS:
-
5+ years of experience in Blue team / Defensive security / Security operations.
-
Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.
-
Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.
-
Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.
-
Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.
-
Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.
-
Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.
Apply for this role Opens jobs.lever.co — the employer's own page, as linked by the source that listed this role
Quick question · anonymous · one tap
Would you apply to this job?
Answer to see what other job seekers said.
Keep looking
Similar remote roles, still open
-
2w ago
Sophos Remote - Canada
-
2d ago
Staff Security Engineer - Blue Team (UK)
Olo Belfast, Northern Ireland, Remote
-
2w ago
Information Security Engineer - (Remote)
Insider One Remote - Turkey
-
4w ago
Axios Remote
See every "Security Engineer Blue" role →
Get new “Security Engineer Blue” roles by email
One email a day with what is new in "Security Engineer Blue". Nothing new, no email.
We confirm the address first, and every mail carries an unsubscribe link. Alerts are ours, not a third party's.
Or follow the daily Telegram channel for the best new remote roles every morning.
Your turn · no account needed
Help the next applicant
You may know something about this listing that we cannot see from here. One tap. No account needed. Signed-in reports earn points once the evidence agrees with you.
I know what it pays
Sign in with Google to earn points for reports — 100 confirmed points buy a week of Early Access.
Where this listing came from
- 23 Oct 2026 Ats Boards first sighting
Seen on 1 board over 0 days.