Analista de Segurança da Informação Sr

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Analyze pentest reports and guide departments in prioritizing and resolving vulnerabilities, focusing on application security (OWASP) while supporting the DevSecOps journey.

• Configure and recommend best practices for perimeter and protection (WAF, hardening, segmentation), network and connectivity from a Zero Trust perspective (NDR, traffic), as well as email protection and collaboration tools.

• Engage in the security of the Microsoft platform (Entra ID, M365, Defender), identify and rectify vulnerable cloud configurations, and review permissioning and least privilege models.

• Operate the incident response plan from a technical standpoint in collaboration with the SOC, technically implement the controls outlined in Annex A of ISO 27001, and support security assessments for AI initiatives.

• Present security controls during internal and external audits.

⛳️ Requirements

• Solid technical experience in cybersecurity with a generalist profile: application security (OWASP), DevSecOps, WAF, and perimeter protection.

• Knowledge in cloud security, preferably Azure, IAM and permissioning, NDR and network security, email protection, and the Microsoft platform (Entra ID, M365, Defender).

• Experience in incident response and interaction with SOC.

• Ability to technically translate ISO 27001 controls (Annex A).

• Proficiency in frameworks such as NIST CSF 2.0, OWASP, and Zero Trust.

• Advantageous experience in AI security (OWASP LLM / Agentic, ISO 42001).

• Knowledge or interest in Artificial Intelligence technologies: tools, applications, and concepts.

🏝️ Benefits

• Meal voucher / Food allowance.

• Health and dental insurance.

• Home Office assistance.

• Profit Sharing.

• Voucher for Setup Kit.

• Life insurance.

• Day Off for birthday.

• GoGood | Conexa.

• Health and wellness promotion program.

• Partnerships and discounts.