Sr. Cyber Security Analyst - Blue Team

At RecargaPay, you will support the Blue Team's Exposure Management program with a clear mission: to know, at all times, where the company is exposed and ensure that what matters most is prioritized for correction. This means building continuous visibility over assets, prioritizing exposures by real business risk, and driving remediation with internal teams, from diagnosis to correction.

Responsibilities

• Take full ownership of the existing Exposure Management program within the Blue Team, scaling it up in asset coverage, evaluation frequency, and remediation speed.
• Maintain continuous visibility of the attack surface (endpoints, cloud, identities, APIs, and internet-exposed assets), using the CrowdStrike Falcon platform as the primary source of telemetry and posture.
• Prioritize exposures by real risk (exploitability, exposure, and business criticality, combining signals like CVSS, EPSS, and CISA KEV), not just by severity.
• Design and operate automations and AI agents that eliminate manual work in triage, enrichment, correlation, and opening remediation tickets.
• Evaluate and monitor access and network posture in the SASE architecture (ZTNA, SWG, CASB), identifying excessively permissive policies and exposure paths.
• Drive remediation with engineering and infrastructure squads: negotiate priorities, monitor SLAs, and formalize exceptions and risk acceptances. Validate which exposures are effectively exploitable, supporting pentests, bug bounty, or attack simulations, and closing the loop with correction.
• Define and report program metrics (exposure trend, MTTR, SLA compliance) and generate evidence for audits and regulatory requirements.

Requirements

• Solid experience in vulnerability or exposure management in production environments, with ownership of a program or a relevant part of it.
• Practical mastery of the CrowdStrike Falcon platform, especially exposure, vulnerability, and posture modules (e.g., Falcon Exposure Management / Spotlight).
• Experience with SASE architectures and Zero Trust concepts (ZTNA, SWG, CASB) from a posture and risk perspective.
• Proven ability to automate security workflows with scripts and integrations (e.g., Python, APIs, SOAR) and to apply AI agents to operational tasks.
• Track record of driving remediation with engineering teams without hierarchical authority, using data and risk-based prioritization.
• Knowledge of cloud security (AWS, GCP) and identities as an exposure vector. Differentiator: experience in fintech, payment methods, or regulated environments (PCI DSS, BACEN, LGPD).
• Differentiator: relevant certifications (e.g., CrowdStrike CCFA/CCFR, OSCP, CISSP, cloud certifications).

Benefits

• Competitive salary aligned with the market.
• Remote work — wherever you are, you're part of the team!
• Home office allowance with a monthly deposit in the RecargaPay app.
• Health and dental plan without co-payment.
• Life insurance.
• Flexible meal voucher (via Flash).
• TotalPass to take care of your health.

Diversity & Inclusion at RecargaPay

At RecargaPay, you have the freedom to be who you are. We believe that different perspectives and experiences make us more creative, innovative, and strong. Here, everyone is welcome to express themselves authentically. We value every journey and the multiple ways of seeing the world, without distinctions.