Senior Email Security Analyst

🇧🇷In-Person - São Paulo, BrazilR$120K–R$180K/yri3h ago

Corporate Research Cybersecurity Threat Analysis Security Research Malware Analysis Email Security

Summary

Senior Email Security Analyst at KnowBe4, the global leader in Human Risk Management, responsible for protecting organizations from email-based cyberthreats and emerging AI-powered security risks. This role contributes to KnowBe4's mission of helping organizations build strong security cultures through advanced technical defenses.

Key Responsibilities: Monitor, analyze, and respond to email security threats and incidents. Develop and implement email security strategies, manage security tools and infrastructure, and provide technical guidance to support KnowBe4's global client base.

Skills & Tools: Advanced knowledge of email security protocols, threat analysis, and incident response. Strong technical troubleshooting abilities, knowledge of security tools and platforms, excellent communication skills, and ability to work in a fast-paced cybersecurity environment.

Qualifications: Several years of experience in email security or cybersecurity roles with demonstrated expertise in threat detection and mitigation. Bachelor's degree in cybersecurity, information technology, or related field, or equivalent professional experience.

Location: São Paulo, Brazil

Compensation: Not provided by employer. Typical compensation for this role is R$ 150,000 – R$ 250,000/year based on title, seniority, and location.

Job Description

KnowBe4 is the global leader in Human Risk Management, trusted by over 70,000 organizations worldwide to secure their employees and AI agents for over 15 years. We're pioneering a new era of security. AI-powered since 2016. And market-leading since day one.

Our HRM+ combines continuous risk intelligence, advanced technical defenses, and personalized training to help organizations build strong security cultures. We help organizations understand, measure, and reduce human risk across their entire workforce, defending against, deepfakes, and emerging AI-powered threats.

We believe that protecting organizations from cyberthreats and creating a positive environmental impact go hand in hand. True resilience is collective, it requires us to protect our people, our data, and our planet.

Please submit your resume in English.

To learn more about our team and office culture in São Paulo, Brazil, visit the following links.
Careers Page: https://www.knowbe4.com/careers/locations/sao-paulo
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-S%C3%A3o-Paulo-Location-EI_IE969384.0,7_IL[…]M_-C1lsxoZq7Cx8IriVE8MkrzuTmnJzqego77RAWZz9sqGt_55BflwYKpQeg
LinkedIn: https://www.linkedin.com/company/knowbe4/life/brazil/

As a Snr. Email Security Analyst at KnowBe4's Threat Labs, you'll conduct hands-on analysis of real-world email-based cyber threats by investigating suspicious emails to identify phishing, malware, and social engineering attacks, extracting indicators of compromise (IOCs) like URLs, domains, and file hashes, tracking ongoing threat campaigns using OSINT tools and mapping them to MITRE ATT&CK frameworks, and contributing technical research blogs and intelligence documentation that helps protect users globally—all while working alongside experienced security researchers in a collaborative environment using industry-standard tools like VirusTotal, URLscan.io, and Python scripting to turn raw threat data into actionable cybersecurity intelligence

Responsibilities:

Manual Threat Analysis: Investigate and classify suspicious emails to identify phishing, malware, spam, and benign attempts from real-world attack scenarios using our internal tooling.
IOC Extraction: Extract and document Indicators of Compromise—URLs, domains, file hashes, sender information—from email headers, body content, and attachments.
Campaign Tracking: Research and monitor ongoing email-based threat campaigns, mapping attacker tactics, techniques, and procedures (TTPs) to MITRE ATT&CK.
Intelligence Contribution: Build and maintain internal threat intelligence datasets, detection patterns, and research documentation.
Collaboration: Partner with senior researchers and participate in threat reviews to share observations and enhance detection quality.
Growth: Keep learning! Share discoveries, explore new analysis techniques, and raise the bar for the team.

Requirements:

Educational Background: A university degree is not required. We actively encourage applications from individuals with vocational IT training, technical diplomas, relevant certifications (e.g., CompTIA IT Fundamentals), or those returning to the workforce who possess strong digital literacy.
3 years experience in the field
An understanding of common cybersecurity threats (e.g., domain spoofing, spear-phishing)
Exceptional attention to detail and the stamina to maintain focus during highly repetitive analytical tasks
Experience handling large datasets

Our Fantastic Benefits

We offer company-wide bonuses based on monthly sales targets, employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses - all in a modern, high-tech, and fun work environment. For more details about our benefits in each office location, please visit www.knowbe4.com/careers/benefits.

Note: An applicant assessment and background check may be part of your hiring procedure.

Individuals seeking employment at KnowBe4 are considered without prejudice to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or any other characteristic protected under applicable federal, state, or local law. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please visit www.knowbe4.com/careers/request-accommodation.

No recruitment agencies, please.