Cybersecurity Analyst, Mid-Level

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Establish and uphold secure configuration standards for cloud platforms, servers, workstations, and network devices.

• Execute and oversee perimeter and access protection measures, including WAF, API security, Zero Trust, MFA, and network segmentation.

• Administer infrastructure vulnerability and patch programs, monitoring coverage by EDR, antimalware, and MDM solutions.

• Ensure that immutable backups are established and restoration tests are conducted, while facilitating the encryption of sensitive information.

• Integrate cloud and infrastructure logs with the SIEM and assist in incident triage and response alongside the outsourced monitoring service (MDR).

• Generate documentation for audits, ISO 27001 certification, and customer due diligence requirements.

• Track security metrics and record implemented standards, exceptions, and controls.

• Collaborate with Infrastructure, Platform Engineering, and IT teams to help create measurable, documented, and auditable controls.

⛳️ Requirements

• 3–5 years of experience in infrastructure or cloud security, or in infrastructure and SRE with a focus on security.

• Practical experience with Google Cloud Platform (GCP), including IAM, VPC, firewall configurations, Cloud Logging, and KMS.

• Understanding of networking principles, including TCP/IP, DNS, firewalls, segmentation, and VPNs.

• Experience in hardening systems and applying CIS benchmarks in both Linux and Windows environments.

• Familiarity with WAF and API protection techniques.

• Knowledge in vulnerability and patch management processes.

• Experience with infrastructure as code and scripting in Python, Bash, or PowerShell.

• Understanding of ISO 27001, CIS Controls, or NIST CSF frameworks.

• Excellent written communication skills for documenting standards, exceptions, and evidence.

• Certifications such as Google Professional Cloud Security Engineer, CCSK, Security+, or CKS are advantageous.

• Familiarity with CSPM, Cloudflare Zero Trust, pfSense, Kaspersky EDR, or MDM solutions is a plus.

• Experience in regulated environments, particularly within the financial and tax sectors, or knowledge of Brazil's LGPD, is beneficial.

• Previous experience serving as the point of contact for a SOC or outsourced MDR service is a plus.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Opportunities for professional development and continuing education.

• Flexible working hours and remote work options.

• Generous vacation and paid time off policies.