SENIOR ANALYST IN CYBER MONITORING PLATFORM ENGINEERING

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

In this role, the person will act as a key technical contributor within the Cyber Defense and SOC ecosystem, being responsible for the design, operation, and continuous improvement of cyber monitoring platforms, with a strong focus on Microsoft security technologies, ensuring scalable, resilient, and effective monitoring capabilities across on-prem, cloud, and hybrid environments.

Main Responsibilities:

• Design, deploy, operate, and continuously improve cyber monitoring platforms based on Microsoft Sentinel and the Microsoft Defender XDR ecosystem;

• Ensure availability, performance, resilience, and security of monitoring platforms across production and pre-production environments;

• Administer platform access using Azure AD / Entra ID, RBAC, and privileged access controls;

• Manage platform lifecycle activities including upgrades, patching, configuration changes, and capacity planning;

• Onboard, maintain, and optimize log sources and ingestion pipelines from on-prem, cloud, SaaS, and third-party security tools;

• Implement automation and Infrastructure as Code using Terraform, ARM/Bicep, and CI/CD pipelines;

• Support SOC operations, detection engineering, threat hunting, and incident response through platform enablement;

• Produce and maintain technical documentation, architecture diagrams, and operational runbooks.

We expect you to have:

• Hands-on knowledge of Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Security Copilot;

• Understanding of Azure security architecture, Azure networking, and identity and access management with Entra ID;

• Knowledge of SIEM/XDR concepts, SOC operations, and cyber monitoring workflows;

• Experience with Infrastructure as Code, CI/CD pipelines, and automation tools;

• Skills in log ingestion, data normalization, KQL querying, and SIEM platform optimization;

• Bachelor’s degree completed in a technology-related field or equivalent;

• Advanced English proficiency;

• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Knowledge of MITRE ATT&CK and its application to detection and monitoring strategies;

• Experience with scripting languages such as PowerShell, KQL, or Python;

• Familiarity with SOAR capabilities using Sentinel automation rules and Logic Apps;

• Exposure to large-scale, enterprise security environments;

• Relevant Microsoft security certifications.