• Gestão e acompanhamento de vulnerabilidades; • Monitoramento e investigação de eventos de segurança; • Apoio na operação e evolução de soluções SIEM; • Gestão de identidades e acessos (IAM); • Apoio na implementação de controles de segurança em ambientes Cloud AWS; • Participação em análises e tratamento de incidentes de segurança; • Elaboração e manutenção de políticas, procedimentos e controles de segurança; • Apoio às iniciativas relacionadas à LGPD e boas práticas de governança; • Interação com times técnicos para evolução contínua da postura de segurança da organização.

• Monitor enterprise infrastructure, investigate security events, manage vulnerabilities, and support incident response activities. • Develop and fine-tune detection rules for XDR platforms, analyse security alerts, coordinate remediation efforts, and collaborate with engineering teams to integrate Threat Modeling into the Software Development Lifecycle (SDLC). • Contribute to security guidelines, automate operational processes through scripting, and build integrations between security platforms using Infrastructure as Code (IaC) principles and APIs.

• Triage, validate, and QA findings surfaced by Sprocket's automation. Reproduce, confirm true positives, and eliminate false positives before anything reaches a client. • Author and refine findings to client-ready quality in the Sprocket voice, and publish them through the platform. • Calibrate severity to real business impact against Sprocket's standards, judging real-world impact over theoretical. • Handle roughly 90% of findings independently and make accurate handle-versus-escalate decisions using the platform workflow, escalating the hard 10% to an Adversarial Engineer with full context attached. • Feed pattern-level signal back to R&D and the Adversarial Engineering team to tune attack automations and cut false positives at the source. You'll be one of the tightest feedback loops we have into R&D. • Log validation notes, flag false-positive patterns, and contribute to the knowledge base. • Script away repetitive validation steps wherever they appear. • Partner with your fellow R&D team members and the Service Delivery team on the automation feedback loop and client-experience improvements. • Seek to programmatically enhance automation pipeline with new or updated capabilities when triage is complete and capacity allows, pairing with an Adversarial Engineer as needed. • Attend daily standups, weekly 1:1s, monthly company calls, and all-hands.

Role Description The Information Security Analyst I will support day-to-day security operations, event/incident investigation, security control assessment, data analysis and reporting, and other infosec-related activities. The analyst will work with the Project team as well as Helpdesk Support team to mitigate risks and vulnerabilities and create documentation or reports regarding infosec activity and incidents. - Must be authorized to work in the U.S. - This is a full-time, direct hire position. - Schedule: Friday, Saturday, Sunday, Monday, 7:00 AM - 6:00 PM (ET) - While working from home, employees must have a reliable internet connection and must work in an environment free of noise and distraction. Essential Duties and Responsibilities - Perform penetration testing; along with internal and external scanning, assess report and escalate to appropriate team and engineers. - Resolve any computers with missing Hard Drive Encryption. - Resolve and report out any violations of Office365 hardening security procedures; this includes but not limited to bypassing multi-factor authentication, device compliance policy, conditional access. - Resolve any computers and servers with missing vulnerability patch and Windows and third-party updates. - Responds to security incidents (Helpdesk Support), conducts forensic investigations and targets reviews of suspect areas as well as develop action plans to address root causes of security-related problems. - Collaborates on projects to ensure that security issues are addressed throughout the project life cycle. - Reports to Risk Manager concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance. - Provides responsive support for problems found during normal working hours as well as outside normal working hours as needed. Qualifications - 1-2+ years of security experience working with Endpoint Security, Intrusion Prevention, and Firewall security. - 2+ years of experience working for an MSP/MSSP or SOC (Security Operations Center). - 2+ years of Incident Response experience. - Proven work experience as a system security engineer or information security engineer. - Experience in building and maintaining security systems. - Detailed technical knowledge of database and operating system security. - Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc. - Experience with network security and networking technologies and with system, security, and network monitoring tools. - Thorough understanding of the latest security principles, techniques, and protocols. - Problem solving skills and ability to work under pressure. Development Expectations - Ethical Hacker - Preferred / Development Plan - Associate of (ISC)² - Preferred / Development Plan - CISSP (Certified Information Systems Security Professional) – Preferred / Development Plan - CCNP Security – Preferred / Development Plan Benefits - Insurance Coverage: Health, Dental, Vision, Life/AD&D, Short-Term Disability, Long-Term Disability, Accident, Hospital Indemnity, Critical Illness. - Paid Time Off (Vacation, Holidays, Birthday). - 401k Retirement Plan with Company Match. - Flexible Spending Account, Health Savings Account. - Peer-to-Peer Recognition. - Learning and Development. - Pet Insurance. - Fun On and Off-Site Events. - Referral Bonus Program. - Employee Assistance Program.