Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Carry out vulnerability assessments for applications, APIs, infrastructure, and cloud environments.

• Execute penetration tests on web, API, mobile, and infrastructure systems, while monitoring the remediation of vulnerabilities.

• Integrate DevSecOps methodologies into CI/CD pipelines.

• Perform secure code analysis using SAST, DAST, and SCA techniques.

• Establish and improve security policies within AWS environments.

• Configure and manage WAF, IDS/IPS, SIEM, EDR, and monitoring tools effectively.

• Implement IAM, MFA, OAuth 2.0, OpenID Connect, and controls for privilege management.

• Address security incidents and conduct forensic investigations as required.

• Assist in security and compliance audits.

• Automate security workflows using scripting and infrastructure-as-code tools.

• Consistently strive to minimize the company’s attack surface.

• Collaborate in a dynamic, fast-paced setting at Click Cannabis, which is focused on developing digital solutions to enhance access to medical cannabis in Brazil.

⛳️ Requirements

• Bachelor’s degree in Technology, Information Security, or a related discipline.

• Extensive experience in the field of cybersecurity.

• Proficient knowledge of Linux systems.

• Advanced understanding of networking concepts (TCP/IP, DNS, HTTP, HTTPS, VPN, VLAN, firewalls).

• Familiarity with AWS Security practices.

• Knowledge of Docker and Kubernetes platforms.

• Experience with OWASP Top 10, CWE, and MITRE ATT&CK frameworks.

• Proven experience in web, API, and infrastructure penetration testing.

• Understanding of OAuth 2.0, JWT, SAML, OpenID Connect, and IAM principles.

• Proficiency with tools such as Burp Suite, Nmap, Nessus, OpenVAS, OWASP ZAP, Metasploit, and Wireshark.

• Awareness of SIEM platforms (Wazuh, Splunk, Sentinel, QRadar, or similar).

• Experience with EDR/XDR technologies.

• Knowledge of Linux server hardening techniques.

• Familiarity with Git and CI/CD practices.

• Experience using Terraform or other Infrastructure as Code tools.

• Understanding of security measures for PostgreSQL and Redis databases.

• Possess a highly technical and investigative mindset.

• Strong analytical and problem-solving abilities.

• Continuous curiosity regarding emerging threats and exploitation techniques.

• Comfortable working in a startup environment.

• Ability to work autonomously.

• Excellent communication skills with technical teams.

🏝️ Benefits

• Contractor engagement (PJ).

• 100% remote work.