Cyber Security Specialist

Cyber Security Specialist

Come Make an Impact on Millions of Brazilians! At RecargaPay, we're on a mission to deliver the best payment experience for Brazilian consumers and small businesses — by building a powerful digital ecosystem where the banked and unbanked connect, and where consumers and merchants have a one-stop shop for all their financial needs. We serve over 10 million users and process more than USD 4 billion annually. We've been profitable since 2022 and operate our own credit business. We are an AI-first, 100% remote team, scaling in the rapidly changing Brazilian financial market. Our goal? Deliver the best payment experience in Brazil for people and small businesses alike. We value autonomy, ownership, and a bias for action. We're looking for people who are curious, hands-on, and driven by impact — who want to solve real problems, work with strong teams, and rethink what's possible. If you're ready to do your best work, at scale, with purpose — this is your place.

Position Overview

RecargaPay is looking for a Cyber Security Specialist to be a hands-on technical practitioner within our CSIRT (Computer Security Incident Response Team). This person will own the detection, response, and containment of security incidents across our payments platform — executing the full incident lifecycle, building detection logic, and driving automation to shrink response time in a cloud-native, high-volume transactional environment.

Key Responsibilities

• Own the full incident response lifecycle end-to-end: detection, triage, containment, eradication, recovery, and post-mortem.
• Develop and maintain playbooks, runbooks, and response procedures that keep response sharp and repeatable.
• Build and maintain detection and response automations (SOAR) to orchestrate workflows across tools and reduce manual toil.
• Operate and continuously tune the detection stack on Elastic (Elasticsearch/Kibana): queries, dashboards, alerts, and event correlation.
• Maintain the Elastic infrastructure on Linux.
• Manage endpoint detection and response via CrowdStrike (EDR), including proactive threat hunting and containment actions.
• Investigate and respond to incidents in AWS (CloudTrail, GuardDuty, IAM, VPC, and related services).
• Produce incident reports and MTTD/MTTR metrics that give leadership clear visibility into the security posture.
• Collaborate with engineering, infrastructure, and compliance teams to remediate vulnerabilities and reduce the attack surface.