Cyber Specialist

We are seeking a Cyber Security Specialist to join our team in Belo Horizonte. This role is hands-on and delivery-focused, responsible for designing, implementing, and operating core cybersecurity capabilities across the organisation.This is not a junior or analyst role. The successful candidate will have demonstrable experience leading or owning security migrations, standing up security services, and managing cyber risk and incidents end-to-end, often working with third-party vendors and MSSPs.You will act as a trusted technical authority, partnering with infrastructure, cloud, and operations teams to uplift & maintain our security maturity.Fluency in both English and Portuguese (written and verbal) is essential for this role.Responsabilidades e atribuiçõesKey ResponsibilitiesSecurity Operations & SOCDesign, implement, and maintain a Security Operations Centre (SOC) model, ideally leveraging third-party / MSSP servicesDefine SOC processes, escalation paths, runbooks, SLAs, and reportingAct as a senior escalation point for security incidents and investigationsEndpoint SecurityLead endpoint protection deployments and migrationsStrong preference for experience migrating CrowdStrike to Microsoft Defender for EndpointDefine endpoint security policies, onboarding processes, and operational monitoringVulnerability ManagementOwn the setup, configuration, and ongoing operation of vulnerability management platformsHands-on experience with one or more of:QualysRapid7Claroty (OT/ICS environments highly regarded)Drive vulnerability remediation programs with IT and infrastructure teamsSIEM & LoggingDesign and execute SIEM migrations or new deploymentsStrong preference for experience migrating Microsoft Sentinel to SplunkDefine log ingestion strategies, correlation rules, alerting, dashboards, and retentionNetwork Security & Internet AccessLead internet proxy and secure access migrationsStrong preference for experience migrating Zscaler to FortiGateCollaborate with network teams on firewall policies, secure access, and segmentationRisk, Incident & Breach ManagementLead cyber risk assessments, threat modelling, and mitigation planningOwn cyber incident management, including coordination, containment, eradication, and lessons learnedLead data breach response, including technical response, documentation, and executive reportingTraining & AwarenessDesign and deliver cybersecurity training and awareness campaignsRun phishing simulations, awareness initiatives, and targeted training for high-risk rolesGovernance & DocumentationMaintain security documentation, architectures, runbooks, and incident reportsContribute to security policies aligned with ISO 27001, NIST, and CIS ControlsProvide regular security posture and risk reporting to leadershipRequired Experience & SkillsTechnical Experience (Essential)5+ years hands-on cybersecurity experience in enterprise environmentsProven experience leading or owning security deployments and migrations, not just operating toolsStrong practical knowledge of:SOC operationsEndpoint protection platformsSIEM technologiesVulnerability managementNetwork and perimeter securityProcess control/Operational Technology environments, ideally at mining organisationsTooling Experience (Strongly Preferred)Candidates should have real-world experience with several of the following:Microsoft Defender for EndpointCrowdStrikeSplunkMicrosoft SentinelQualysRapid7ClarotyZscalerFortiGate / Fortinet security stackSoft SkillsConfident working independently with minimal supervisionAble to translate technical risk into business impactComfortable engaging with vendors, MSSPs, and senior stakeholdersCalm, structured approach during security incidentsLanguageFluent English and Portuguese (written and verbal) – mandatoryCertifications (Preferred, Not Mandatory)CISSPCISMGIAC (GCED, GCIA, GCIH)Microsoft Security certificationsFortinet certificationsRequisitos e qualificaçõesInformações adicionais