[Hiring] Senior Information Security Analyst @KnowBe4

Role Description

KnowBe4 is seeking a Senior Information Security Analyst in Brazil to join our Security team! In this role, your primary focus will be proactive threat hunting, internal vulnerability assessment/penetration testing, and building custom security automations to ensure enterprise data and infrastructure remain safe.

As our infrastructure evolves, you will play a critical role in bridging an internal coverage gap in threat hunting and penetration testing, solving root-cause security challenges, and collaborating with and mentoring global SOC team members across the US, UK, and Brazil.

Responsibilities:

• Threat Hunting & Penetration Testing: Conduct proactive threat hunting across cloud and hybrid environments, identify log coverage gaps, and perform internal vulnerability assessments and penetration testing to recommend system hardening and patching.
• Security Automation & Tooling: Build internal security tools and automated testing workflows using Python or Bash to parse complex logs, streamline forensic data collection, and integrate security APIs.
• Cloud Security & Incident Response: Conduct security reviews and audits of AWS cloud environments, act as lead investigator for complex security incidents, and optimize ElasticSearch SIEM alerts to minimize false positives.
• Strategic Security Operations: Move beyond routine alert triage to solve root-cause security problems, improving overall infrastructure resilience and security posture.
• SOC Leadership & Mentorship: Serve as a subject matter expert for junior and mid-level analysts, developing training materials, leading tabletop exercises, and providing technical guidance to elevate overall team readiness.

Qualifications

• Experience in Security Operations (SOC), Information Security, or a related technical role.
• SOC & Threat Hunting: Proven track record in active threat hunting, incident investigation, and building or maturing SOC operational components rather than solely triaging alerts.
• Scripting & Automation: Strong hands-on proficiency in Python or Bash for log parsing, forensic data collection, and custom security tool development.
• Cloud & Linux Fluency: Hands-on experience securing cloud infrastructure (AWS as the primary focus) and navigating Linux command-line interfaces.
• SIEM Expertise: In-depth knowledge and practical experience configuring and customizing ElasticSearch SIEM for log collection and alert tuning.
• Language: Fluency in technical English (written and spoken) to collaborate smoothly across global teams.
• Cultural Fit: Personable, open communication style with authentic engagement, willingness to share personal context, and a collaborative spirit.

Requirements

• Experience participating in Capture The Flag (CTF) competitions, ethical hacking, or red/blue team testing.
• Personal GitHub repositories or open-source security projects.
• Exposure to multi-cloud environments (Azure or GCP).
• Relevant industry certifications or a degree in Information Security / Computer Science.

Benefits

• Company-wide bonuses based on monthly sales targets.
• Employee referral bonuses.
• Adoption assistance.
• Tuition reimbursement.
• Certification reimbursement.
• Certification completion bonuses.