Purple Team Analyst

#WeAreVision 🧡 Vision Cybersecurity: we are the beginning, the growth, and the success of technology infrastructure in Brazil 🚀 We protect data, drive businesses, and strengthen the future of our clients through innovation, technical excellence, ethics, and anticipation. We work daily to simplify complex challenges and ensure more security in the Enterprise market in Brazil. At Vision, we value knowledge exchange, continuous learning, collaboration, and protagonism. We are a team that believes in the power of connections, in the development of people, and in building an environment where every professional can grow, contribute, and generate real impact. We seek curious, committed people who want to evolve with us, contributing to making the digital world safer every day. We are a team made up of people who see beyond the obvious!🧡

Responsibilities and assignments

This professional will be part of the team responsible for:

• Adversary Emulation (Threat Emulation): Plan and execute simulations of attacks and malicious techniques based on real scenarios and Threat Intelligence (CTI), using the MITRE ATT&CK framework as a methodological basis to replicate the behavior of cybercriminals.
• Continuous Control Validation (Assurance): Test the real effectiveness of security tools (SIEM, EDR, NDR, Firewalls) to ensure they are generating the expected alerts and blocks in the event of an intrusion.
• Identification of Blind Spots (Visibility Gaps): Map failures in log collection (e.g., servers that are not sending critical telemetry to the SIEM) or assets that do not have protection agents installed, reporting these deviations to the infrastructure and engineering teams.
• Collaboration in Detection Engineering: Work side-by-side with Detection Engineers and SOC analysts to refine alert rules post-testing, aiming to increase detection precision and reduce false positives (alert fatigue).
• Security Testing Automation (BAS): Implement and manage automated testing routines using Breach and Attack Simulation (BAS) platforms or open-source frameworks (such as Atomic Red Team), ensuring that updates in the IT environment do not cause regression in existing security rules.
• Translate emulation results into actionable reports (RCA, Improvement Plans) for both the technical team and management, ensuring the closure of the learning cycle.

Requirements and qualifications

• Previous and solid experience working in Incident Response, SOC (L2/L3), Threat Hunting OR in Penetration Testing / Red Teaming;
• Ability to translate tactics, techniques, and procedures (TTPs) of cybercriminal groups into practical tests and monitoring rules;
• Practical experience operating or consulting platforms such as SIEM (e.g., Splunk, Microsoft Sentinel, QRadar) and EDR/XDR (e.g., CrowdStrike, Defender for Endpoint, Cortex XDR);
• Scripting and Automation Languages: Essential for automating simulations, evidence collection, event enrichment, advanced queries, and continuous validation of security controls;
• Deep knowledge of operating systems (Windows, Linux) and, critically, architecture and common vulnerabilities;
• Desirable Degree in Information Technology, Cybersecurity, or Related Areas;
• Intermediate English for Reading, Technical Document Analysis, and Communication with International Teams;
• Practical experience with open-source tools (e.g., Atomic Red Team, Caldera, Prelude) or commercial BAS platforms (e.g., Picus, AttackIQ, Cymulate);
• Knowledge in writing universal detection rules, such as Sigma and YARA;
• Knowledge in executing security tests and understanding native logs from Cloud providers (AWS, Azure, GCP);
• Knowledge in creating, adjusting, and validating detection rules, hunting queries, and correlations for SIEM, EDR/XDR, and monitoring platforms.

Additional information

BENEFITS OF BEING VISION! 🧡

At Vision, security starts with people. Therefore, we always seek well-being, development, and growth for our employees.

For your physical and mental health:

• 🩺 Bradesco Top Nacional health plan;
• 🦷 Odontoprev Dental Plan;
• 🌱 Life insurance;
• 📱 Pipo Saúde: Digital health and corporate benefits broker;
• 🏋️‍ TotalPass: Platform that connects you to various networks to help take care of your well-being (and that of your family).

For your daily life:

• 🚌 Vale transporte;
• 💳 Alelo Tudo: Food and Meal allowance in a single card;
• 💰 Private Pension: Double match, here VISION contributes with you;
• 🎂 Birthday Dayoff: How about a day off in your birthday month?
• 🤝 Referral Campaign: Here your referral is worth money;
• 📚 Discounts in Educational Institutions;
• 🍼 Kit Vision Baby: Because new beginnings also deserve care and celebration;
• 🔅 Exclusive discounts at the SESC group: Leisure for you and your family;
• 💻 Welcome Kit: We prepare a Super kit to support your daily work;
• ☕ Breakfast and afternoon snack with fruit for in-person days.

For your career development:

• 📚 DeepLearning: Our Corporate University;
• 🚀 Professional growth opportunity;
• 🚀 Feedback and development culture;
• 🚀 Exclusive program for leadership;
• 🚀 Here you have a relaxed environment that breathes innovation;

Our leadership is accessible! The doors are always open and you can find them in the company hallways. You will stay updated with market news and will always be in contact with an innovative team. What are you waiting for? #WeAreVISION