Lead Analyst, Security Engineering
Canoas, RS, BR
Not everyone can claim to feed the world, but it is part of our every day. Behind everything we do for our farmers, there is one AGCO team making it happen. We are proud to put our curiosity to work, building a better and more sustainable world. Join our extraordinary team today!
We are seeking an experienced Lead Analyst, Security Engineering to join our Security Operations Center (SOC) team. This is a hands-on technical leadership role focused on operational excellence in our detection and response capabilities, with primary ownership of the organization's SIEM and SOAR platforms.
You will be the go-to expert for advanced troubleshooting, automation development, tool integration, and feature evaluation while actively participating in incident response and partnering with business units to ensure security controls support organizational objectives.
Your Impact
- Proven experience managing Palo Alto XSIAM platform;
- Must have team spirit, proactive, cross-function collaborative desire and self-driven capabilities;
- Manage and optimize SIEM and SOAR platforms, including lifecycle management, log source onboarding, tuning, and troubleshooting to ensure reliable detection and response capabilities;
- Design and implement advanced detection and automation solutions, such as correlation rules, dashboards, anomaly models, and SOAR playbooks to reduce MTTD and MTTR, while leading proof-of-concepts for emerging security technologies;
- Lead incident response and cross-functional collaboration, serving as Tier 3 escalation for complex investigations, supporting forensics and containment, mentoring team members, and contributing to security strategy and tool rationalization.
Your Experience and Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field, with 7+ years of hands-on cybersecurity operations experience, including 4+ years focused on SIEM and SOAR platforms.
- Deep expertise in next-generation SIEM and SOAR, including building complex detection rules, automations, and integrating diverse log sources (cloud, identity, network, EDR/XDR).
- Strong programming and automation skills in Python, PowerShell, Bash, and experience developing SOAR playbooks to reduce MTTD and MTTR.
- Proven incident response and threat hunting experience, with solid understanding of attacker TTPs (MITRE ATT&CK) and modern threat landscape.
- Excellent communication and leadership skills, with experience mentoring teams, managing vendors, and collaborating cross-functionally to align security with business priorities.
Your Benefits
- Medical and dental assistance;
- Private pension;
- Meal and food vouchers;
- Pharmacy agreement and life insurance;
- Others.
Your Workplace
Hybrid position based in Canoas/RS, Mogi das Cruzes/SP or Jundiaí/SP
We value inclusion and recognize the innovation a diverse workforce delivers to our farmers. Through our recruitment efforts, we are committed to building a team that includes a variety of experiences, backgrounds, cultures and perspectives.
Join our extraordinary team today and apply now!
Job Segment:
Cyber Security, Sustainable Agriculture, Engineer, Computer Science, Security, Agriculture, Engineering, Technology