• Design and implement security automation systems, reducing manual workloads and accelerating detection and response. • Leverage Open-Source Intelligence (OSINT) techniques for threat hunting, investigations, and exposure analysis. • Collaborate with engineering and security teams to integrate automated solutions into production environments. • Support incident response and remediation efforts by providing research-driven insights and automated tooling. • Continuously evaluate and deploy emerging security tools, frameworks, and AI/automation technologies.

• Monitor security tools and investigate alerts across network, system, and cloud environments • Lead investigation and response for security incidents, including containment and remediation • Conduct vulnerability assessments and support penetration testing activities • Perform risk analysis and document findings with clear remediation plans • Develop and maintain runbooks, playbooks, and security procedures • Improve detection logic and response workflows based on emerging threats • Research new threats and recommend practical countermeasures • Prepare clear reports and brief stakeholders on incidents and risk trends • Mentor junior analysts and review investigative work for quality and accuracy • Support security audits and compliance activities as assigned

• Experiência comprovada com segurança de sistemas e infraestrutura; • Habilidades "hands-on" para configurar e manter ferramentas de segurança, incluindo firewall, WAFs, sistemas de detecção e prevenção de intrusões (IDS/IPS), antivírus, api gateway e monitoramento de redes; • Monitoramento e investigação de alertas em ferramentas como SIEM e EDR; • Análise de eventos e tentativa de exploração de aplicações e infraestrutura; • Gestão e tratamento de vulnerabilidades (identificação, priorização e acompanhamento de correções); • Análise de código sob a perspectiva de segurança; • Participação em processos de due diligence de segurança em fornecedores; • Apoio na resposta a incidentes e investigação de possíveis comprometimentos; • Habilidade para desenvolver e documentar políticas, diretrizes e manuais de segurança; • Proposição de melhorias em processos e controles.

• Lead Incident Response efforts for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery. • Perform threat hunting across endpoints, networks, and cloud workloads to proactively identify indicators of compromise, emerging threats, and control gaps. • Conduct cloud incident response for AWS, Azure, and GCP, and other cloud environments including Kubernetes and containerized workloads, performing log analysis, identity compromise investigations, and workload forensics. • Drive product security incident response, collaborating with engineering teams to analyze potential exposure to vulnerabilities, exploits, and security flaws in NVIDIA products. • Perform digital forensics and malware analysis to support investigations and root cause analysis. • Develop and optimize security orchestration and automation playbooks in partnership with Security Engineering to accelerate detection and response. • Build and refine detections and defense strategies based on threat models and attacker behaviors across cloud, identity, endpoint, and product telemetry, using frameworks such as MITRE ATT&CK to map adversary tactics and enhance detection coverage. • Provide guidance to engineering and business teams on secure design and incident handling standards and contribute to security policies, standards, and metrics to continuously improve NVIDIA’s security posture.