Watch Desk Analyst (Brand & Cyber Focus)

About the role

The Watch Desk Analyst (Brand & Cyber Focus) works inside the Global Security Operations Center, supporting the company's security intelligence work. The analyst identifies and assesses online risks that may affect the company, its customers, executives and employees, mainly by monitoring public sources and security platforms for phishing, impersonation, fake apps, fraudulent ads, suspicious domains, leaked-data claims, scams and reputational risks. It is a hands-on role for someone comfortable working with online information.

Key responsibilities

• Monitor public sources and security tools to identify potential risks involving the company's brand, customers, executives and employees.
• Review alerts on phishing, impersonation, fake apps, fraudulent ads, suspicious domains, leaked data and online scams.
• Check whether findings are relevant, credible and urgent, and escalate the right cases to the right teams.
• Write clear, timely updates explaining what happened, why it matters and what should happen next.
• Support brand protection and takedown efforts by collecting evidence, documenting findings and following up on suspicious content.
• Look for repeated patterns across cases to help the team spot recurring actors, tactics and abuse trends.
• Track cyber threat signals to flag emerging risks.
• Provide backup coverage for security risk intelligence to monitoring of physical, geopolitical and situational risks.

Required profile

• Bachelor's degree in Computer Science, International Relations, Social Sciences or a related field, or equivalent practical experience.
• Genuine interest in security, threat intelligence, brand protection, fraud, OSINT or cyber risk.
• Fluency in Portuguese and working English; Spanish is a plus.
• Ability to prioritize under pressure and work in a 12x36 shift schedule.
• Discretion with sensitive information and a collaborative, team-first attitude.

Required skills

• Basic understanding of OSINT/SOCMINT concepts, source verification and safe online research practices.
• Familiarity with common cyber and online abuse signals such as phishing, malicious domains, leaked credentials, impersonation and scams.
• Clear written communication and consistent documentation of findings.
• Preferred: postgraduate degree, OSINT/SOCMINT research, threat-intelligence or takedown platforms, MITRE ATT&CK or cyber kill chain, fraud trends in Brazil or Latin America, and basic Python or scripting skills.