Top Cybersecurity Jobs in Sao Paulo

Designs, implements, and supports Red Hat cloud and container solutions for customers. Responsibilities include architecture, deployment, troubleshooting, performance tuning, automation, infrastructure configuration, incident response, technical consulting, documentation, and customer presentations. The consultant serves as a subject matter expert while managing complex open-source solution lifecycles and adapting implementations to customer requirements.

Partner with sales to provide technical expertise, deliver demos and tailored presentations, support evaluations/POVs, own technical engagement during trials, resolve customer issues, escalate bugs, and relay product feedback to prioritize features. Engage across technical and executive stakeholders to qualify and close mid-market opportunities.

Lead global PCI DSS assessments, scoping, evidence collection, attestations, and third-party QSA relationships. Advise teams on secure payment solutions, manage compliance data in Archer, deliver PCI awareness training, integrate acquisitions, and improve testing, reporting, and enterprise compliance processes. Partner with business leaders, Treasury, CFOs, development teams, and GRC stakeholders to maintain compliance across worldwide cardholder data environments.

Protect Braze employees and assets by investigating malware/advanced threats, implementing DLP, securing SaaS and email, hardening configurations, enhancing SIEM, reviewing third-party SaaS, automating controls, mentoring juniors, participating in on-call rotations, and responding to incidents.

Hands-on cloud security engineer responsible for incident response, security reviews, IAM management, operating and tuning security tooling (EDR, SIEM, CSPM, vulnerability scanners), running vulnerability scans, driving remediation with engineering teams, and writing Python scripts to automate repetitive security tasks.

Leads enterprise cybersecurity sales for Microsoft Security across assigned accounts in the Philippines. Builds CISO and stakeholder relationships, identifies security opportunities, demonstrates cloud security architecture, develops ROI and TCO business cases, orchestrates Microsoft and partner resources, manages forecasts and CRM hygiene, and drives negotiations, deployment planning, and revenue growth. Requires strong security expertise, technical sales capability, and Portuguese and English proficiency.

Leads the Cyber Threat Intelligence program, including doctrine development, intelligence-cycle management, actionable reporting, advanced OSINT collection, OPSEC, vendor management, brand protection, threat hunting, and adversary analysis. Focuses on fraud and threat landscapes in Brazil and Latin America, translating intelligence into detection rules and security-control improvements. Provides technical leadership, mentoring, and briefings to security teams and executives.

Leads global and site security programs across facilities, offices, and laboratories. Responsibilities include security operations, risk and vulnerability assessments, crisis response, investigations, threat awareness training, vendor and contract coordination, governance, technology roadmaps, reporting, and continuous improvement. The role manages security budgets, supports law-enforcement relationships, advises executive leadership, and maintains 24/7 readiness for security incidents and emergencies.

Responsible for building and managing strategic alliances, recruiting new partners, and driving revenue growth through effective partner management and collaboration with internal teams.

Own the vulnerability management lifecycle across a cloud-native AWS environment, including discovery, risk assessment, remediation tracking, and verification. Investigate security incidents, operate and tune production SIEM platforms, reduce false positives, automate security operations with scripting, and partner with DevSecOps and engineering teams. The role also requires network and endpoint security expertise, analytical problem-solving, and rotating on-call coverage.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Communicate with clients and security researchers, determine vulnerability severity and accuracy, escalate critical findings through incident response, and assist with scripting or tooling to improve triage and validation. The role requires strong application security knowledge, especially OWASP Top Ten vulnerabilities, security assessment tools, organization, and communication skills.

Manage customer security and compliance programs from initial assessment through implementation. Assess security posture, recommend safeguards, develop programs aligned with frameworks such as SOC 2 and ISO 27001, collaborate with clients and auditors, and translate requirements into policies, configurations, and integrations. Serve as a technical account manager and vCISO, advising stakeholders, supporting implementations, and providing feedback to engineering.

Triage and validate vulnerability submissions for bug bounty programs, assess validity and severity, communicate with clients and researchers, escalate critical incidents, and support security tooling development. The role requires strong OWASP vulnerability knowledge, application security testing expertise, scripting or development ability, and proficiency with tools such as Burp Suite, nmap, sqlmap, and Kali Linux.

Leads the global OT security strategy for Danaher’s manufacturing portfolio. Responsibilities include advancing IT/OT segmentation, monitoring, asset visibility, remote access controls, architecture, platform roadmaps, governance, policies, technical standards, threat-informed defenses, and security assessments across multinational industrial environments. Partners with CIOs, security functions, and technology teams while providing senior technical leadership and final approval for major architecture decisions.

Design and implement data security architecture across cloud storage, data lakes, warehouses, SaaS, and data pipelines. Lead DSPM and DLP implementations, sensitive-data mapping, encryption, masking, tokenization, retention, and sharing controls. Build Python- and API-based automations, integrate SOAR workflows, and enforce cloud security through Terraform. Partner with data, machine learning, legal, governance, and IT teams to translate privacy requirements into scalable controls.

Lead Level 2 and Level 3 security incident response, coordinating MSSPs, SOC teams, and cross-functional stakeholders. Conduct forensic investigations, root-cause analysis, containment, eradication, and post-incident reviews. Develop and automate incident-response playbooks, improve SIEM and EDR detection rules, manage cyber threat intelligence processes, and support cloud incident response across AWS and GCP. Serve as the technical focal point during high-criticality incidents and communicate findings to technical and executive audiences.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Reviews CVE reproductions, exploit proof-of-concepts, vulnerability fixes, Docker-based labs, and security regression tests. Validates attack conditions, remediation effectiveness, root-cause resolution, application functionality, and alternative exploitation paths. Responsibilities include analyzing configurations, software versions, networking, test suites, and vulnerability classifications while providing rigorous technical feedback. The role is remote, part-time, and project-based, focused on application security and vulnerability research.

Own partner and customer success across the NA/LATAM ecosystem by guiding onboarding transitions, driving adoption and value realization, conducting QBRs and EBRs, monitoring satisfaction and usage metrics, managing escalations and risks, and identifying growth opportunities. The role requires collaboration with commercial, technical, product, engineering, support, and sales teams while serving as a trusted advisor to MSPs, MSSPs, resellers, and direct customers.

Lead and mentor a software engineering team, define roadmaps with product, drive technical architecture for distributed systems, ensure delivery quality, on-call reliability, security, and stakeholder alignment across Brazil and France.

Manage post-sale customer relationships across LATAM for a cloud security platform. Lead technical onboarding, deployments, feature adoption, roadmap discussions, support coordination, renewals, and expansions. Serve as the primary customer contact, surface security insights, resolve issues, gather feedback, and advocate for customer needs with Product Management and Technical Support. Requires SaaS customer-facing experience, cloud infrastructure or cybersecurity expertise, Portuguese and English fluency, and strong technical project and relationship-management skills.

Provide consulting on IT security methodologies and assessments, monitor threat landscape and regulatory requirements, perform risk analyses, develop IT security methodologies and recommendations, conduct security assessments, support IT product groups and M&A due diligence, and contribute to IT group standards and committees.

Own post-sale success for enterprise customers using SAFE’s CTEM platform. Serve as a trusted cyber-risk advisor to CISOs, CIOs, risk, compliance, and security operations stakeholders; align success goals, drive value realization and retention metrics, support platform adoption, coordinate deployment issues, document best practices, and communicate customer feedback to Product Management.

Administer and support IAM, IGA, PAM, Active Directory, Entra ID, MFA, Intune, and related platforms across cloud and hybrid environments. Manage identity lifecycle operations, access reviews, governance controls, troubleshooting, compliance activities, and privileged access processes. Develop PowerShell automation, maintain device compliance, conduct system health checks, and improve authentication, authorization, security, and operational stability.

Own full sales cycle for Tenchi's TPCRM SaaS, identifying and qualifying prospects, delivering demos, collaborating with marketing/product, building client relationships, and meeting revenue targets.