Cyber Response Analyst

Essa posição é para atuar presencialmente em Contagem, MG.
Who will you be working with?
Join Enterprise Information Security (EIS) to drive cybersecurity excellence leveraging intelligence, strategic partnerships and analysis. Collaborate daily with Security Operations, GRC and key Information Technology stakeholders to advance our information security capabilities.
How will you make a difference?
Join Enterprise Information Security and play a key role in advancing Wabtec Corporation’s cybersecurity program. As Lead Response Analyst, reporting to the Team Lead, Response, you will be responsible for handling the entire lifecycle of security incidents from detection to resolution and root cause analysis. You will also develop, implement, and maintain standard documents, policies, and playbooks.
In this role you will be responsible for handling and escalating security incidents and owning critical security projects. You should be comfortable with learning new technologies and highly motivated to develop and deploy cutting edge technologies. You must be security focused and driven to perform in a fast-paced environment.
What do we want to know about you?
Bachelor’s degree in computer science, Information Technology, related field, or experience in cybersecurity.
Strong leadership and decision-making skills, with the ability to remain calm and effective during high-pressure security incidents.
Solid understanding of incident response lifecycles, including preparation, detection and analysis, containment, eradication, and recovery, and post-incident activity.
Excellent communication skills, with experience briefing technical teams, leadership, and stakeholders through written incident writeups and verbal presentations.
Must be willing to work weekends/off-shift hours, as needed during cybersecurity incidents.
Advanced English.
We would love it if you had:
Hands-on experience with enterprise security tools such as SIEM, EDR, SOAR, threat intelligence platforms, and cloud security controls.
Strong understanding of modern threat landscapes, attack techniques and defensive control strategies.
Effective project management skills.
Ability to work independently with strong time management skills, consistently driving value and delivering results without direct supervision.
Commitment to continuous learning in an evolving cybersecurity landscape.
What will your typical day look like?
Monitor active security incidents and lead response efforts, including triage, escalation, and coordination through resolution.
Review alerts, incident escalations, and post-incident analyses to identify trends, gaps, and opportunities for improvement.
Maintain and enhance incident response playbooks, runbooks, and documentation to reflect evolving threats and technologies.
Detect, investigate, and respond to security events from firewalls, IDS, IPS, SIEM, WAF, Mail Gateway, DLP and other sources.
Lead, coordinate, work closely with 24/7/365 monitoring, incident detection, and response using both internal resources and an industry leading MSS provider.
Produce After‑Action Reports (AARs) to document and communicate post‑incident threats, risks, and lessons learned.
Other duties as assigned.
#LI-PROMOTEDJOBS

Employment type
Full-time

Work arrangement
Hybrid