• Serve as the primary internal point of contact and liaison for our 24/7 Managed Detection and Response (MDR) service provider. • Own the internal response and coordination workflow when our external security partner escalates a validated, high-severity threat. • Routinely review managed security portals, threat hunting reports, and endpoint/XDR coverage status across our remote workforce. • Manage the technical integration of security alerts into internal team communication channels and centralized IT ticketing platforms. • Perform daily triage and manual investigation of cloud productivity suite signals, access logs, and application-layer telemetry not fully covered by external tools. • Gather and package evidence logs from endpoint managers, identity providers, and ticketing systems to support our ongoing SOC 2 compliance frameworks and internal audits.

• Liderar o ciclo de vida de nossos produtos e iniciativas de proteção digital. • Convertar requisitos complexos de segurança, riscos e conformidade em um backlog técnico e estratégico. • Priorizar a geração de valor e a proteção contínua dos ativos da organização. • Gestão Estratégica do Backlog: Liderar a construção, o refinamento e a priorização do backlog de segurança e da Central de Inteligência. • Cultura Security by Design: Assegurar a integração de requisitos de segurança desde a concepção até a entrega no ciclo de desenvolvimento. • Articulação Multidisciplinar: Facilitar a comunicação com os stakeholders de negócio. • Governança por Dados (KPIs): Definir e monitorar indicadores-chave de performance. • Evangelização de Segurança: Promover a cultura de Segurança da Informação e Privacidade de Dados.

• Responsible for supporting 24x7 operations within the Unified Support Security Operations Center (SOC) and Observability functions • Continuous monitoring of security events and system health across IFS customer environments • Analyzing alerts from both security and observability platforms • Identifying potential threats or service anomalies • Ensuring timely incident triage and response • Responsible for monitoring the IFS customer security state • Analyze real-time events and triage incidents based on the severity of the situation • Assist in identifying and addressing information security gaps, with a focus on cloud environments • Stay up to date on the latest cybersecurity threats and vulnerabilities and support the implementation of recommended mitigations • Proactively monitor alerts for all cloud hosted IFS products • Communicate with other resolver groups to rectify them • Contribute to the operation (Observability) coverage of 24x7x365 • Identify and categorize prioritized incoming events or alerts for IFS products via Observability stack • Generate regular reports on the organization’s security posture and incident trends • Contribute to the creation and maintenance of operational documentation and knowledge base articles • Any other duties as designated by the line manager

• Own complex incident investigations end-to-end, from detection to containment and remediation. • Conduct root cause analysis and post-incident reviews. • Continuously hunt for anomalies and threats across on-prem and cloud environments using threat intelligence, analytics, and behavioral patterns. • Monitor global threat actor activity, transform raw intel into actionable defense strategies, and collaborate with internal teams to harden security posture of OutSystems. • Work with engineering and DevSecOps teams to improve detection coverage, enrich SIEM use cases, and automate response processes. • Develop, optimize, and maintain incident response and threat hunting playbooks, ensuring operational excellence and consistency. • Identify gaps, suggest improvements, and contribute to capability building for detection, response, and threat modeling.