Senior Security Analyst - SOC/CTI

As a Senior SOC & CTI Analyst, your mission is to proactively detect, investigate, and neutralize threats targeting EBANX's payment infrastructure, digital assets, and customer data. You will be at the intersection of real-time security operations and strategic threat intelligence, translating adversary knowledge into actionable defenses that protect EBANX's operations, reputation, and financial performance. By leading threat hunting initiatives, enriching detection capabilities with intelligence, and driving the maturity of SOC processes, you will help EBANX stay ahead of the evolving threat landscape while scaling securely.

Responsibilities

Proactively detect, investigate, and neutralize threats targeting EBANX's payment infrastructure, digital assets, and customer data; Leading threat detection and incident response operations — monitoring, triaging, and investigating alerts across SIEM, EDR/XDR, and cloud-native security tools, managing incidents end-to-end to minimize operational and financial impact, and conducting forensic analysis on compromised assets; Producing and operationalizing Cyber Threat Intelligence — collecting, analyzing, and disseminating finished intelligence on threat actors, TTPs, malware families, and campaigns targeting the fintech and payments sector, with a strong focus on MITRE ATT&CK mapping and adversary profiling; Leading proactive threat hunting initiatives — hypothesizing and investigating potential compromises across on-premises and cloud environments (AWS, Azure) before alerts fire, using intelligence-driven hypotheses and behavioral analytics; Managing and enriching detection engineering — developing and tuning detection rules, correlation logic, and threat models based on intelligence findings and gap analysis, reducing dwell time and false positive rates; Monitoring vulnerabilities with an intelligence lens — contextualizing CVEs and emerging threats against EBANX's attack surface, prioritizing remediation based on active exploitation evidence, and coordinating with IT and development teams; Supporting compliance and security audits — ensuring alignment with PCI-DSS, ISO 27001, LGPD, and other applicable frameworks, collaborating with risk, legal, and compliance teams on evidence and control validation; Producing intelligence and executive-level reporting — delivering tactical, operational, and strategic threat intelligence products for both technical teams and leadership stakeholders

Requirements

Solid hands-on experience in SOC operations, including L2/L3 incident handling, threat detection, and security monitoring across on-premises and cloud environments; Proven experience in Cyber Threat Intelligence — producing intelligence reports, tracking threat actor groups, analyzing malware and campaigns, and converting raw data into actionable intelligence products; Deep knowledge of the MITRE ATT&CK framework — proficiency in adversary profiling, TTP mapping, threat modeling, and using ATT&CK Navigator for gap analysis and detection coverage; Experience with threat hunting — developing and executing structured hunting missions using intelligence-driven hypotheses, behavioral analytics, and custom queries (e.g., KQL, SPL, or similar); Strong proficiency with SOC tooling — SIEM platforms, EDR/XDR solutions, threat intelligence platforms (TIPs), sandbox environments, and cloud-native security tools; Familiarity with fintech or payments threat landscape — understanding of fraud patterns, adversary motivations, and threat vectors specific to payment infrastructure is a strong advantage; Experience in environments governed by PCI-DSS, ISO 27001, and SOC2 frameworks; Strong technical leadership — ability to mentor peers, lead complex investigations, drive detection improvement initiatives, and coordinate with cross-functional teams; Strong ownership mindset — autonomy, accountability, and proactive problem-solving with a bias for action; Advanced English — ability to produce and present intelligence products for both technical and executive audiences; Required Certifications (at least one required): GIAC GCTI – Cyber Threat Intelligence; GIAC GCIH – Incident Handler; GIAC GCIA – Intrusion Analyst; CompTIA CySA+; eCTHP – eLearnSecurity Certified Threat Hunting Professional

Nice to have

GIAC GCED – Enterprise Defender; CHFI – Computer Hacking Forensic Investigator; eCDFP – eLearnSecurity Certified DFIR Professional; Blue Team Level 2 (BTL2); AWS Certified Security – Specialty or Azure Security Engineer Associate; Experience with open-source CTI tooling (MISP, OpenCTI, YARA, Sigma rules)

Benefits

Performance Bonus: Annual bonus program based on company results; Meal Allowance: Monthly allowance to support your meals; EBANX Education: Financial assistance for undergraduate, graduate, and MBA programs to support your professional growth; EBANX Skills: Dedicated budget for courses, certifications, and workshops to encourage continuous learning; Language Classes: Language classes to support your personal and professional development; Health & Well-being: Medical and dental plans with extensive coverage, including support for dependents and wellness programs; Flexible Work Culture: Semi-flexible hours, additional day off on your birthday, and year-end break to support work-life balance; Well-being Program: Access to activities and resources that promote physical and mental health