{"id":61721,"url":"https://alion.io/job/recargapay-cyber-security-specialist","title":"Cyber Security Specialist","company":{"id":8798,"name":"RecargaPay","domain":"recargapay.com.br","url":"https://alion.io/company/recargapay","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"ElasticSearch","optional":false},{"name":"IAM","optional":false},{"name":"Kibana","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Bash","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-21T02:09:53Z","board_verified":true,"closed_at":null,"days_open":65,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":65},"description":"Come Make an Impact on Millions of Brazilians! At RecargaPay, we're on a mission to deliver the best payment experience for Brazilian consumers and small businesses - by building a powerful digital ecosystem where the banked and unbanked connect, and where consumers and merchants have a one-stop shop for all their financial needs. We serve over 10 million users and process more than USD 4 billion annually. We've been profitable since 2022 and operate our own credit business. We are an AI-first, 100% remote team, scaling in the rapidly changing Brazilian financial market. Our goal? Deliver the best payment experience in Brazil for people and small businesses alike. We value autonomy, ownership, and a bias for action. We're looking for people who are curious, hands-on, and driven by impact - who want to solve real problems, work with strong teams, and rethink what's possible. If you're ready to do your best work, at scale, with purpose - this is your place.\nPosition Overview\nRecargaPay is looking for a Cyber Security Specialist to be a hands-on technical practitioner within our CSIRT (Computer Security Incident Response Team). This person will own the detection, response, and containment of security incidents across our payments platform - executing the full incident lifecycle, building detection logic, and driving automation to shrink response time in a cloud-native, high-volume transactional environment.\nKey Responsibilities\nOwn the full incident response lifecycle end-to-end: detection, triage, containment, eradication, recovery, and post-mortem. \nDevelop and maintain playbooks, runbooks, and response procedures that keep response sharp and repeatable.\nBuild and maintain detection and response automations (SOAR) to orchestrate workflows across tools and reduce manual toil. \nOperate and continuously tune the detection stack on Elastic (Elasticsearch/Kibana): queries, dashboards, alerts, and event correlation. \nMaintain the Elastic infrastructure on Linux. \nManage endpoint detection and response via CrowdStrike (EDR), including proactive threat hunting and containment actions. \nInvestigate and respond to incidents in AWS (CloudTrail, GuardDuty, IAM, VPC, and related services). \nProduce incident reports and MTTD/MTTR metrics that give leadership clear visibility into the security posture.\nCollaborate with engineering, infrastructure, and compliance teams to remediate vulnerabilities and reduce the attack surface. \nRequirements\nTechnical Skills\nSolid hands-on experience in security incident response in complex, high-volume environments. \nStrong command of Elasticsearch/Elastic Stack for detection, threat hunting, and alert creation. Experience with AWS security - native security services and cloud log investigation. \nHands-on experience with CrowdStrike or an equivalent EDR. Workflow automation and orchestration using a SOAR or automation platform. \nStrong Linux proficiency (administration and hardening). Knowledge of BTT (Boitatá), Apura's threat intelligence tool. Experience with mTLS certificate lifecycle management and AWS ACM (Certificate Manager). \nFluency with frameworks such as MITRE ATT&CK, NIST IR, and standard incident taxonomies. \nSoft Skills\nTechnical depth: owns a complex domain (CSIRT tooling and detection engineering) and drives improvements without needing direction. Independent judgment under pressure: makes sound containment decisions in fast-moving incidents with incomplete information. \nCross-functional influence: translates security findings into clear, actionable guidance for engineering and infrastructure partners. \nDocumentation discipline: keeps playbooks, runbooks, and post-mortems current so the team can operate without heroics. \nContinuous improvement mindset: proactively identifies detection gaps and proposes measurable improvements to MTTD/MTTR. \nNice to Have\nBackground in financial services, fintech, or other high-volume transactional environments.\nScripting (Python / Bash) for automation and tool integration. \nCertifications such as GCIH, GCIA, GCFA, OSCP, or equivalent. Experience with compliance requirements (PCI-DSS, LGPD). \nBenefits\nCompetitive and market-aligned salary.\nRemote work - wherever you are, you’re part of the team!\nHome office allowance through a monthly deposit in the RecargaPay app.\nHealth and dental plans with no co-pay.\nLife insurance.\nFlexible meal allowance (via Flash).\nTotalPass membership to take care of your health.\nDiversity & Inclusion at RecargaPay\nAt RecargaPay, you’ll have the freedom to be who you are because we believe that diverse perspectives and experiences make us more creative and stronger. Here, everyone is welcome to express themselves authentically. We value the richness of each journey and the multiple ways of seeing the world, without distinctions of gender, race, sexual orientation, age, religion, or any other characteristic that makes us unique.\nAbout the Use of Your Data\nBy sharing your resume with us, you authorize the use of your data for analysis during the selection process and possibly for other opportunities within the RecargaPay group. You can request the update or deletion of your information at any time, in accordance with LGPD (General Data Protection Law).","description_format":"text","description_chars":5238,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Home office","Life insurance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Payment Processing & Gateways","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-08-14T00:00:00Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.76,"p_room":0.36,"age_days":64,"expected_fill_days":39,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/recargapay-cyber-security-specialist","json_url":"https://alion.io/job/recargapay-cyber-security-specialist.json","meta":{"generated_at":"2026-10-21T03:47:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8798},"rest":"https://alion.io/mcp/rest/get_company?id=8798"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frecargapay-cyber-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frecargapay-cyber-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frecargapay-cyber-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/recargapay-cyber-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frecargapay-cyber-security-specialist"}]}