Vision Cybersecurity

• Perform offensive security testing on hosts running various platforms and operating systems (Windows, UNIX, Linux); • Conduct intrusion tests (penetration testing) on network infrastructures, cloud systems, mobile applications (Android, iOS), and web applications; • Ethically and responsibly exploit vulnerabilities, whether documented or previously undocumented; • Analyze log files from various sources (hosts, network traffic, firewalls, intrusion detection systems) to identify potential security threats; • Collaborate with the defensive team to establish controls and measures that prevent identified exploitations; • Produce detailed reports on exploitation activities performed and document actions taken during tests; • Present penetration test results and act in a consultative capacity, providing support to incident response teams; • Operate autonomously to perform intrusion tests and pentests across different platforms and environments, adhering to ethical and legal guidelines; • Ability to propose and recommend preventive and corrective actions to mitigate identified vulnerabilities; • Authority to guide and assist defensive teams in implementing controls and adjustments based on test findings.

• Prepare proposals and quotes for products and services for clients; • Negotiate proposals; • Place orders with suppliers and coordinate the work; • Negotiate with clients; • Knowledge of sales frameworks MEDDIPICC, SPIN Selling, BANT; • Manage the entire opportunity lifecycle within the CRM.

• Act in response to cybersecurity incidents, conducting identification, containment, eradication, recovery, and lessons learned • Perform forensic analysis on workstations, servers, virtualized environments, mobile devices, and cloud environments • Collect, preserve, and analyze digital evidence, ensuring the integrity of the chain of custody • Perform memory forensics, disk forensics, and analysis of operating system artifacts • Identify techniques, tactics, and procedures (TTPs) used by malicious actors • Conduct compromise investigations involving malware, ransomware, phishing, credential compromise, lateral movement, persistence, data exfiltration, and privilege escalation • Develop and execute Threat Hunting hypotheses during incident investigations • Prepare technical and executive reports containing event timelines, attack analysis, impact, root cause, indicators of compromise (IoCs), and mitigation recommendations • Support SOC, Engineering, Infrastructure, and Cloud teams during containment and recovery activities • Analyze logs from SIEM, EDR, Firewalls, Active Directory, Microsoft 365, Entra ID, VPN, Proxy, IDS/IPS, and other telemetry sources • Develop scripts and automations to optimize investigation and response activities • Support the creation and update of playbooks, operational procedures, and technical documentation • Participate in incident response war rooms, working with multidisciplinary teams and clients during critical incidents • Support tabletop exercises and continuous improvement activities for incident response capabilities • Stay up to date on new threats, vulnerabilities, offensive techniques, and investigative tools

• Manage a portfolio of Large Enterprise accounts with full responsibility for revenue and client relationships • Build and execute an individual Account Plan for each account — mapping stakeholders, strategic initiatives and expansion opportunities • Develop long-term relationships with CISOs, CTOs, CFOs and other purchasing decision-makers • Actively prospect within the assigned account portfolio, identifying opportunities for new services and expansion of existing contracts • Rigorously qualify opportunities: budget, authority, need and timeline defined (BANT) • Maintain an up-to-date pipeline with realistic close forecasts • Work closely with a dedicated Pre-Sales team to structure technical and commercial proposals • Lead complex sales processes with 90–180 day cycles, involving multiple stakeholders • Negotiate scope, pricing and contractual terms in alignment with technical and finance teams • Participate in weekly pipeline reviews, providing accurate opportunity-level forecasts • Report the status of each account in the CRM with next steps, expected close date and committed value • Collaborate with Marketing to identify market needs and portfolio gaps • Actively contribute to the development of the Large Enterprise playbook.

• Develop and monitor financial and operational indicators (KPIs), proposing corrective and preventive actions based on data, as well as operational controls and indicators • Lead economic and financial feasibility projects to support strategic decision-making • Design and monitor cash flow in partnership with Treasury and other stakeholders • Manage corporate governance, compliance, and risk management processes, proposing continuous improvements • Serve as the point of contact for audit processes, ensuring timely delivery of high-quality information • Ensure compliance with tax, accounting, and financial regulations, keeping the company in good standing with regulatory authorities • Prepare management presentations for the executive team, translating financial data into strategic insights • Support senior management in business planning and in defining management strategies and direction • Promote a culture of high performance, continuous development, and results orientation within the department

• Provision, modify, and revoke access to systems and applications. • Manage the identity lifecycle (Joiner, Mover, and Leaver). • Handle access-related requests and incidents, ensuring SLA compliance. • Perform periodic access reviews and support recertification processes. • Operate IAM solutions such as SailPoint, Microsoft Entra ID (Azure AD), or similar tools. • Support the implementation and improvement of Identity and Access Management (IAM) processes. • Prepare operational documentation and support access audits.

• Conduct risk assessments to identify and classify threats and vulnerabilities in systems and networks; • Analyze logs and security events to detect suspicious patterns and anomalous behavior; • Use forensic analysis tools to investigate cybersecurity incidents and conduct detailed investigations; • Develop and implement action plans to remediate or mitigate identified vulnerabilities; • Collaborate with IT teams to deploy patches, fixes, and security enhancements; • Stay up to date on the latest security updates and patches provided by vendors; • Produce regular reports on cybersecurity status and present metrics to leadership; • Continuously review security processes and procedures, proposing and implementing improvements to strengthen the security posture; • Prioritize and recommend actions to remediate critical vulnerabilities identified; • Influence the adoption of security practices and processes across the organization to ensure compliance and protection.

• Handle configuration requests, incidents, planned tasks and network security-related problems, collecting information from clients or other internal teams such as NOC and SOC. • Produce analytical reports or RCAs, prepare technical opinions, and review reports created by other analysts, ensuring clear and formal communication. • Ensure SLA compliance by receiving, recording and resolving requests, with a primary focus on delivery quality and customer satisfaction. • Support other teams in implementing new features and propose process and practice improvements. • Create routine security and health checks for assets, maintain and update the knowledge base, and develop documentation for performed activities. • Analyze and process security incidents, determining the best approach for resolution. • Contribute to implementing security improvements and enhancements to technical support processes, collaborating with Security and Infrastructure teams. • Monitor and support the procurement team in the equipment licensing process.

• Prevent and mitigate cyber threats by proactively protecting systems and networks from malicious activity. • Analyze and assess network events and system anomalies within a SOC (Security Operations Center) environment, using security tools to detect and prevent intrusions. • Monitor and tune security alerts generated by devices such as SIEM, IPS, and firewalls, creating and following playbooks for triage and incident escalation. • Collaborate with Level 2+ analysts on threat research and investigations, applying an investigative and curious approach. • Respond to incidents, service requests, problems, and changes related to managed solutions. • Produce analytical reports on security events and incidents and support the development and maintenance of KPIs. • Participate in operational cadence meetings with clients and track progress on new projects. • Analyze and adjust cybersecurity alerts and perform prevention and response activities within your area of responsibility. • Take part in decision-making for incident triage and alert escalation according to established security playbooks. • Propose improvements to security processes and tools, contributing to the effectiveness of SOC operations.

• Prevenir e mitigar ameaças cibernéticas, atuando de forma proativa para proteger sistemas e redes de ações maliciosas. • Analisar e avaliar eventos de rede e anomalias de sistemas dentro de um ambiente SOC (Security Operations Center), utilizando ferramentas de segurança para detectar e prevenir invasões. • Monitorar e ajustar alertas de segurança gerados por aparelhos como SIEM, IPS e firewalls, criando e seguindo playbooks para triagem e escalonamento de incidentes. • Colaborar com analistas de Nível 2+ em pesquisas e investigações de ameaças à segurança cibernética, aplicando uma abordagem investigativa e curiosa. • Realizar atendimentos a incidentes, requisições, problemas e mudanças relacionadas às soluções administradas. • Criar relatórios analíticos sobre eventos e incidentes de segurança e apoiar no desenvolvimento e manutenção de KPIs. • Participar de reuniões de cadência operacional com clientes e acompanhar o andamento de novos projetos.