Casas Bahia Tecnologia

• Lead technical initiatives to modernize the Payments Proxy platform. • Work on the evolution of Java/Spring Boot applications in mission-critical, high-transaction-volume environments. • Plan and execute migration of applications hosted on VMs to Kubernetes environments (AKS). • Define and implement containerization strategies using Docker. • Improve CI/CD pipelines using GitHub Actions and DevOps best practices. • Support the architectural transformation of monolithic systems into more scalable and resilient architectures. • Ensure observability, performance, security, and high-availability best practices. • Collaborate with infrastructure, architecture, and cloud platform teams. • Support troubleshooting and resolution of complex production incidents. • Participate in defining technical standards, development best practices, and engineering governance. • Contribute to continuous improvement of the technology stack and reduction of technical debt.

• Coordenar as operações do Security Operations Center, garantindo monitoramento contínuo, resposta rápida e alinhamento com as políticas de segurança da empresa; • Avaliar e otimizar processos de resposta a incidentes, implementando automações, playbooks e métricas para aumentar a eficiência e reduzir o tempo de resposta; • Conduzir análises detalhadas de incidentes, identificando causas raiz, impactos e propondo medidas corretivas e preventivas; • Administrar soluções SIEM, SOAR e outras ferramentas de monitoramento, garantindo integração e eficácia na detecção de ameaças; • Trabalhar com equipes de defesa cibernética, GRC, IAM e infraestrutura para coordenar ações durante incidentes e melhorar a postura geral de segurança; • Elaborar relatórios técnicos e executivos sobre incidentes, tendências e melhorias implementadas; • Treinar analistas do SOC e demais envolvidos em melhores práticas de resposta a incidentes e uso de ferramentas; • Manter-se atualizado sobre novas técnicas de ataque, frameworks de resposta (ex.: NIST, MITRE ATT&CK) e tendências do mercado.

• Plan and conduct complex penetration tests (red team, adversary simulation, chained attacks), including hybrid environments (on-premises, cloud, and mobile), focusing on realistic, high-impact scenarios; • Structure and evolve attack methodologies, frameworks and playbooks, aligning offensive initiatives with business risks and the organization’s strategic priorities; • Lead Red Team and Purple Team exercises and simulations based on real TTPs (MITRE ATT&CK), assessing the effectiveness of defensive and response controls; • Develop advanced techniques, exploits, tools and automations, and research vulnerabilities (0-day, n-day, business logic) and new exploitation methods; • Support security investigations with an offensive perspective, helping reproduce attacks, validate hypotheses and identify compromise vectors; • Act as a mentor for junior, mid-level and senior staff, raising the team’s technical level and disseminating knowledge; • Work closely with security leadership, architecture and business stakeholders, translating technical risks into organizational impact and supporting strategic decisions; • Evaluate the effectiveness of controls (EDR, WAF, IAM, SIEM, etc.) through advanced offensive techniques; • Produce high-level reports with risk assessment, financial impact and strategic recommendations, as well as detailed technical documentation; • Propose structural improvements to security posture, tools, processes and offensive capabilities.

• Translate business problems into machine learning solutions by structuring hypotheses, defining approaches, and ensuring alignment with the strategic objectives of business areas (marketing, logistics, fraud, etc.). • Lead the development of solutions using AutoML (Databricks), from data exploration to validation and handoff to MLOps, ensuring reproducibility, quality, and scalability. • Serve as a bridge between business and technology, leading discussions with stakeholders and ensuring clarity in problem definition, success metrics, and acceptance criteria. • Evolve and apply machine learning best practices within the CoE, focusing on prevention of overfitting, data leakage and class imbalance issues, standardization of pipelines and experimentation, and creation of minimum validation criteria (scorecards, benchmarks, etc.). • Actively contribute to the creation and evolution of the AutoML Portal, supporting the definition of technical and educational content, development of practical examples and reusable notebooks, and structuring topics such as metrics, problem types, and interpretability. • Support the strategy for AutoML adoption across business areas, acting as a technical facilitator in projects and helping unblock use cases. • Develop and communicate insights clearly and decision-oriented, using appropriate visualizations and storytelling for both technical and non-technical audiences. • Act as a technical reference for the team, supporting the development of other members, reviewing deliveries, and disseminating best practices. • Identify opportunities for efficiency gains and automation, proposing solutions that scale the use of machine learning across the company. • Create analytical materials and executive presentations oriented to decision-making.

• Desenvolver, evoluir e manter aplicações backend utilizando Java e Spring (Boot, Data, Security, etc.). • Atuar no desenho e implementação de soluções escaláveis, performáticas e seguras. • Participar ativamente de discussões técnicas e decisões de arquitetura. • Garantir boas práticas de engenharia: testes automatizados, code review, clean code e observabilidade. • Trabalhar de forma colaborativa com times de produto, frontend e QA. • Ter responsabilidade de ponta a ponta pelas entregas, desde a concepção até a produção. • Contribuir para a melhoria contínua dos processos e da stack tecnológica.

• Evolve and ensure the quality of ITSM processes (Incident, Problem, Change, etc.) • Work on incident prevention and reduce recurrence • Monitor and analyze metrics to generate insights for decision-making • Support change management with focus on risk, impact, and reliability • Connect technical and business areas, promoting alignment and governance • Identify opportunities for automation and efficiency gains • Act proactively to continuously improve processes

• Manage and evolve Cloud infrastructure practices, principles, services, standards, community, and policies; • Actively participate in project deployments involving Cloud environments; • Automate tasks that are currently performed manually (Infrastructure as Code - IaC); • Define and support cluster architecture for microservices, correct instance sizing, and scalability and upgrade processes; • Evaluate and improve observability metrics focused on software products; • Facilitate resource configuration.

• Manage and evolve Cloud infrastructure practices, principles, services, standards, community, and policies. • Actively participate in project deployments involving Cloud environments. • Automate tasks that are currently performed manually (Infrastructure as Code - IaC). • Define and support cluster architectures for microservices, ensure correct instance sizing, and manage scaling and upgrade processes. • Facilitate resource configuration.

• Ensure the roadmap is delivered within agreed timelines. • Review and challenge the team's technical estimates. • Remove impediments and unblock the development flow. • Monitor engineering metrics and address bottlenecks. • Track team performance with a focus on delivery. • Anticipate risks and act quickly in critical scenarios. • Communicate status clearly to stakeholders.

• Coordinate Security Operations Center (SOC) operations, ensuring continuous monitoring, rapid response and alignment with company security policies; • Assess and optimize incident response processes, implementing automation, playbooks and metrics to increase efficiency and reduce response times; • Conduct detailed incident analyses to identify root causes, impacts and propose corrective and preventive measures; • Administer SIEM, SOAR and other monitoring solutions, ensuring integration and effectiveness in threat detection; • Work with cyber defense, GRC, IAM and infrastructure teams to coordinate actions during incidents and improve overall security posture; • Prepare technical and executive reports on incidents, trends and implemented improvements; • Train SOC analysts and other stakeholders on incident response best practices and tool usage; • Stay up to date on new attack techniques, response frameworks (e.g., NIST, MITRE ATT&CK) and market trends.