• Lead and perform detection content development within the SIEM platform (Elastic, Palo XSIAM, Crowdstrike), including: • Creation, tuning, and lifecycle management of detection rules, correlation rules, and analytic stories/use cases • Definition and maintenance of data models, normalization, and enrichment required to support high‑quality detections • Mapping detections to frameworks such as MITRE ATT&CK where applicable • Identify gaps in detection coverage based on incident trends, threat intelligence, and hunt activities • Reduce false positives and improve alert signal‑to‑noise ratio through iterative tuning • Translate playbooks and incident response workflows into robust, testable detection. • Monitor and manage the health and performance of SIEM detection content, including: • Tracking detection firing patterns, volumes, and performance impact. • Conducting post-incident reviews to refine detections and create new coverage. • Ensuring detections remain aligned with client use cases, risk profiles, and contracted scope. • New and existing detections are prioritized based on risk, impact, and available data • Partner with AHEAD Managed Security and client resources in the design and implementation of new data visualizations and detection rules, including: • Building dashboards, visualizations, and investigative views that support triage and hunting • Collaborate with AHEAD Managed Security SOAR (Swimlane) engineering resources to: • Integrate SIEM detections with SOAR workflows for enrichment, triage, and response • Continuously improve incident investigation workflows and automation quality based on detection output • Engage with client security and IT infrastructure teams for new data source onboarding activities, including: • Defining logging, parsing, normalization, and enrichment requirements to support current and planned detections • Validating that ingested data is complete, normalized, and usable for detection engineering • Tune rules, filters, and policies across SIEM and related security technologies (IDS, EDR, firewalls, etc.) to: • Improve accuracy, visibility, and coverage while minimizing noise • Ensure consistent correlation and context across multiple technologies • Perform data mining and exploratory analysis of log sources to: • Uncover and investigate anomalous activity and potential undetected attack patterns • Identify new detection opportunities and support proactive threat hunting • Assist with the development and improvement of processes and procedures for: • Detection lifecycle management (design, testing, deployment, monitoring, retirement) • Improving incident response times, incident quality, and overall Managed Security functions • Participate in client-facing security meetings to: • Explain detection strategy, coverage, and improvements.

Role Description At Boomi, we aim to make the world a better place by connecting everyone to everything, anywhere. We are seeking a Solutions Engineer with a focus on iPaaS and Hybrid Integration. In this role, you will serve as a technical advisor during the sales cycle, demonstrating how Boomi’s platform solves complex business challenges by connecting disparate systems, applications, and data sources. You will be responsible for proving the technical value of Boomi’s connectivity—ensuring that data flows seamlessly and securely across the modern enterprise. Key Responsibilities - Technical Validation & Demonstration: Execute high-impact demonstrations that showcase Boomi’s capability to handle App Integration, EDI, and Managed File Transfer (MFT) workflows. - Real-Time Connectivity: Support the design of messaging architectures using Event Streams to enable event-driven business processes for prospects. - Proof of Concept (PoC) Leadership: Lead the technical validation phase for integration opportunities, configuring and proving the operability of Boomi within the prospect’s specific environment. - Enterprise Ecosystem Support: Assist in building connectivity solutions for complex landscapes, including Hybrid-Cloud and Multi-Cloud environments, ensuring interoperability between core systems of record and cloud applications. - Consultative Discovery: Partner with Account Executives to identify technical pain points and landscape requirements via discovery calls and technical workshops. - Collaborative Sales Support: Work with Senior Solutions Engineers and "Win Teams" to provide technical depth for RFI/RFP responses and detailed product specifications. Qualifications - iPaaS Proficiency: Practical experience with iPaaS technologies and integration patterns (synchronous/asynchronous, hybrid cloud). - Messaging & Events: Foundational knowledge of event-driven architectures (EDA) and tools such as Event Streams, Solace, Kafka, or RabbitMQ. - B2B & File Standards: Practical knowledge of EDI standards and secure Managed File Transfer (MFT) protocols. - Analytical Problem Solving: A structured approach to designing integration workflows and troubleshooting complex mapping or transformation logic. - Technical Communication: Ability to translate technical connectivity concepts into clear business value for both technical users and business stakeholders. Requirements - Cloud & APIM Platforms: Proficiency in AWS, Azure, or GCP ecosystems and enterprise API suites (e.g., MuleSoft, Apigee, or Kong). - Professional Certifications: Industry credentials in Cloud Architecture (AWS/Azure/GCP), Information Security (CISSP/CCSP), or Enterprise Frameworks (TOGAF). - Governance & Emerging Tech: Knowledge of API Lifecycle Management and the security/orchestration of AI-driven APIs and LLMs. Benefits - On Target Earnings (OTE) for this role are $154K - $193K (inclusive of commission). - Base compensation is determined by various factors including geographic location and the candidate's knowledge, skills, and experience. - This position is remote-friendly.

Role Description Stefanini Group is seeking a Compute Engineer to join our Hybrid Cloud Infrastructure (HCI) cluster within the Infrastructure Services Division. This role operates within large, complex enterprise environments, supporting mission‑critical platforms and high‑scale virtualization infrastructures. The Compute Engineer will play a key role in the design, implementation, and ongoing optimization of large‑scale Citrix and VMware environments for our clients. The position focuses on ensuring high availability, resiliency, security, and performance across enterprise infrastructures, while collaborating closely with cross‑functional teams to deliver robust, future‑ready virtualization solutions aligned with both business and IT strategy. - Provide senior‑level operational support for enterprise Citrix and VMware environments, ensuring high availability, performance, and adherence to SLAs. - Lead advanced troubleshooting and root‑cause analysis across virtualization, Compute, Windows Server, and profile management technologies. - Perform routine operational lifecycle tasks such as patching, upgrades, capacity management, performance tuning, and regular platform health checks to ensure stable day‑to‑day service delivery. - Maintain and improve monitoring, alerting, and operational processes to ensure proactive issue detection and rapid incident response. - Support change management activities, including planning, execution, validation, and documentation of changes in production environments. - Develop and maintain comprehensive operational documentation, including runbooks, SOPs, configuration records, and knowledge‑base articles. - Ensure environments are fully transition‑ready by validating operational maturity, supportability, and alignment with managed services standards. - Collaborate with onboarding teams to support smooth customer transitions into managed services. - Manage and optimize user profile and workspace solutions using Omnissa, Dynamic Environment Manager (DEM), and FSLogix across large VDI estates. - Support the operational stability of Citrix CVAD (on‑prem) and Citrix Cloud services in multi‑site enterprise environments. - Contribute to the evolution of Citrix and VMware platforms by providing operational insights that inform design decisions and roadmaps. - Participate in modernization initiatives, workload migrations, and infrastructure improvement projects. - Evaluate emerging technologies and best practices, recommending enhancements that improve reliability, scalability, and operational efficiency. - Implement and enforce enterprise security policies, technical controls, and compliance requirements across compute and virtualization platforms. - Conduct regular security assessments and vulnerability reviews, ensuring timely remediation and secure platform operation. Qualifications - Bachelor's degree in Computer Science, Information Technology, or a related discipline. - 5+ years of hands-on experience in Citrix systems engineering within large or enterprise-scale environments, demonstrating strong expertise in Citrix, VMware, and end-user computing technologies. - Proven experience in a Citrix Senior Engineer role, or equivalent senior role, with deep exposure to complex, distributed infrastructures. - Strong experience with profile and user environment management solutions, including Omnissa, DEM, and FSLogix, in large-scale VDI deployments. - Relevant certifications such as Citrix Certified Advanced Administrator, VMware Certified Associate, and ITIL® Foundation are highly desirable. - Proficiency in Windows Server administration and management. - Excellent analytical and problem-solving skills, with the ability to independently manage complex, high-impact technical challenges. - Strong communication and stakeholder engagement skills, with professional proficiency in English; additional languages are an advantage. Company Description We are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology. - We are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations. - Our mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients. - We are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects. - More than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses. - If you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.

Role Description As a Senior/Staff Windows Detection Engineer, you will help shape the future of endpoint security through a unified, converged platform that automatically prevents, detects, and responds to threats in real time. You will design and develop advanced Windows detections by combining deep system process inspection, behavioral analysis, and innovative machine learning techniques to identify and stop sophisticated attacks before they cause harm. You will join a growing team of passionate security experts and technical leaders who think differently, challenge assumptions, and constantly explore new ways to outsmart adversaries. In this role, you will hunt for emerging threats, solve complex security problems, and deliver high-impact detection capabilities with speed and precision. What will you do? - Responsible for detecting the newest malware and exploits based on SentinelOne’s Endpoint Protection platform. - End-to-end responsibility for behavior-based detection capabilities, including: - Reversing samples - Designing new methods to detect or prevent threats - Implementing solutions in the product (SW development in C++23 and scripting in Lua) - Developing and using internal research tools, PoCs, and discovering new ways to detect/prevent exploitation attacks (EoP, drive-by attacks, and more). - Enhancing the security of dozens of millions of Windows endpoints protected by our platform. Qualifications - Highly desirable experience in developing behavioral detection for AV/EPP/EDR or similar cybersecurity products. - Several years of experience in malware analysis (statically and dynamically) and a deep understanding of modern Windows attack TTPs. - Excellent understanding of Windows Internals, including core system components (Process and Threads, Virtual Memory, etc.). - Hands-on experience and strong command of programming in C++ (expected to ship production-level code). - Proven experience with reverse engineering of x86/x64/ARM binaries. - Experienced with analysis tools such as IDA, WinDBG, SysInternals, etc. - An advantage would be kernel development experience, Python or similar scripting language experience, and/or understanding of existing AV/EDR internals. Benefits - Flexible working hours; this is a remote role based within Italy. - IWG pass to major coworking chains. - Relocation assistance available for candidates willing to relocate to the Czech Republic (must be eligible to work in the EU). - Generous employee stock plan in the form of RSUs (restricted stock units); 4 years vesting with 1 year cliff and then quarterly, stock refresh yearly. - Yearly bonus depending on the performance of the company, paid out in 2 installments. - Global gender-neutral Parental Leave (16 weeks, beyond local laws) & Grandparent Leave. - Volunteering paid day off & additional paid Company holidays off (e.g., 4 days in 2022). - Global Employee Assistance Program (confidential counseling related to personal and work life matters). - Udemy Business platform for Hard/Soft skills Training & Support for further educational activities/trainings. - Above-standard referral bonus and additional country-specific benefits to Italy.