7 hours ago
Remote, Brazil or São Paulo, BrazilSenior
Responsibilities
- Investigate complex cyber-attacks to uncover adversary behaviors and support customer defenses.
- Design, monitor, and maintain production-grade detection methodologies and scalable security data pipelines across large-scale telemetry.
- Triage high-severity incidents, present investigation findings, and provide advanced technical support to customers.
- Analyze AI-generated detections and collaborate with researchers to improve their effectiveness.
- Apply threat intelligence to identify tactical shifts and enhance defensive coverage.
- Translate research insights and threat intelligence into automated defenses using scripting and APIs.
- Collaborate with globally distributed teams to maintain operational continuity and share knowledge.
Requirements
- 5+ years of cybersecurity experience spanning security engineering, cloud-native architectures, XDR platforms, and SOC environments.
- Ability to independently correlate diverse telemetry, investigate threats, and disrupt adversary activity.
- Experience writing robust code, such as Python, to build, monitor, and maintain modern security data pipelines.
- Advanced or fluent English proficiency.
- Strong understanding of attacker tactics, techniques, and procedures, MITRE ATT&CK, network protocols, and operating-system internals.
- Experience leveraging artificial intelligence and machine learning to identify anomalies, mitigate threats, and improve detection workflows.
Benefits
- Benefits supporting employees' health, well-being, finances, and life beyond work.
- FlexBase work arrangements allow employees to work from home, in an office, or through a combination of both.
- The role supports collaboration with globally distributed teams.
About Akamai
Akamai builds content delivery, cloud security, and edge compute services for enterprises that run consumer and business web, API, and video workloads. The public company (NASDAQ: AKAM), founded in 1998 and headquartered in Cambridge, MA, operates a global CDN and security platform and sells via subscriptions and usage-based services. It expanded into cloud infrastructure by acquiring Linode in 2022, offering IaaS and managed Kubernetes.