Security Engineer - Blue Team
Loadsmart · São Paulo / Remote · posted Oct 14, 2026
Open to candidates in Brazil
More remote jobs open to candidates in Brazil
You apply on the company's own site. We never charge to apply.
What this role actually asks for
Extracted by RemoteHuntMust have
- •5+ years in Blue team/Defensive security/SecOps
- •Lead security incident response end-to-end
- •Build and tune SIEM detections (Datadog)
- •Forensics and evidence handling in cloud
- •Secure AWS and Kubernetes
- •Automate security tasks with Python/Bash
- •Fluent English
Nice to have
- •Experience with MITRE ATT&CK, CIS, or NIST
- •Experience with infrastructure as code (Terraform)
Tools and technologies
Languages required
The full posting
ARE YOU INTERESTED IN JOINING AN INNOVATIVE LOGISTICS TECHNOLOGY COMPANY?
Loadsmart is a growth-stage technology company valued at over $1 billion (a true Tech Unicorn)!
We are a collection of industry veterans and user-centered engineers using innovative technology to fearlessly reinvent the future of freight by helping shippers, brokers, warehouses and carriers to move more with less.
With headquarters in Chicago and a globally distributed remote team, Loadsmart continues to attract top talent committed to driving meaningful change. We seek professionals who embody our core values: curiosity, clarity, results, commitment, and teamwork.
In this role, you will lead our response to security incidents and help strengthen our defensive security program. We are seeking an experienced, goal-driven Mid-Level Security Engineer who thrives in a dynamic and fast-paced global company. As the second engineer on our Blue Team, you will partner with our current Blue Team engineer and with engineering squads across product and platform engineering to detect threats early, respond fast, and keep our applications and infrastructure safe and compliant.
DEPARTMENT: Engineering
LOCATION: Remote anywhere in Brazil
WHAT YOU GET TO DO::
-
Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.
-
Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.
-
Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.
-
Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.
-
Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.
-
Automate detection and response tasks with Python and Terraform.
-
Report on incidents and security posture to engineering leadership, and mentor engineers across squads.
REQUIRED QUALIFICATIONS::
-
5+ years of experience in Blue team / Defensive security / Security operations.
-
Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.
-
Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.
-
Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.
-
Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.
-
Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.
-
Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.
Similar remote jobs
More remote jobs open to candidates in
Get new jobs like this by email
Once a week. Remote security engineer jobs that can hire you in your country.
Is this one actually worth your time?
RemoteHunt scores every remote job 0–100 against your own resume, so you apply to the handful that fit instead of the hundred that don't. Free plan, no card required.