About CloudWalk
CloudWalk, Inc. builds the intelligence layer where money, software, and trust converge. One foundation, three brands: InfinitePay, Jim, and Pierre.
About the role
CloudWalk is hiring a Insider Risk Security Engineer São Paulo, BRA · Full Time Risk and Compliance Apply in Remote (US). The full description is on CloudWalk's site.
What they're looking for
- Reduce the Noise: Continuously tune alerts and detection logic to drive down false positives and keep the signal high
- Automate Workflows: Write code (TypeScript) to automate repetitive triage tasks and integrate our insider risk tools with our SIEM and SOAR platforms. If you repeat a triage step twice, automate it
- Cross-Functional Operations: Partner directly with Legal, People, and other Security teams to safely and discreetly conduct forensic investigations and coordinate remediation efforts
- Threat Hunting: Proactively hunt for undetected anomalous behavior, unauthorized shadow IT usage, or risky data handling practices across endpoints and cloud environments
More about this role
- Build & Tune Detections: Design, implement, and fine-tune rules across Chronicle (YARA-L), Wiz, and SentinelOne, plus our DLP and UEBA surfaces. Move beyond out-of-the-box alerts, actively cut false positives, and own the detection lifecycle from rule creation to retirement.
- Investigate & Triage: Act as the primary technical investigator for insider risk alerts. Analyze logs, reconstruct user timelines across our entire stack, and determine what happened, why, and what to do about it — including intent behind data movement.
- Reduce the Noise: Continuously tune alerts and detection logic to drive down false positives and keep the signal high.
- Automate Workflows: Write code (TypeScript) to automate repetitive triage tasks and integrate our insider risk tools with our SIEM and SOAR platforms. If you repeat a triage step twice, automate it.
- Weaponize AI for Investigations: Build and tune LLM-powered agents that triage alerts, enrich them with cross-platform context, and reconstruct investigation timelines automatically. Turn repetitive forensic work into autonomous workflows.
- Cross-Functional Operations: Partner directly with Legal, People, and other Security teams to...
Browse similar: Startup jobs · Remote jobs