Information Security Analyst, DevSecOps

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Implement and uphold DevSecOps methodologies throughout the software development lifecycle.

• Manage and secure both production and staging environments, ensuring the infrastructure's security and reliability.

• Monitor and address vulnerabilities in systems, servers, containers, and third-party libraries by applying updates, patches, and fixes.

• Automate security checks within CI/CD pipelines utilizing SAST, DAST, and SCA tools.

• Configure and oversee Cloudflare as well as mechanisms for the secure storage of keys, secrets, and certificates.

• Establish and enforce hardening policies for servers, containers, and services.

• Provide support for security incident handling and response activities.

• Advise the development team on security best practices and engage in architecture reviews from an Information Security standpoint.

• Assist less technical users by offering guidance and recommendations regarding platform security.

⛳️ Requirements

• Bachelor’s degree completed or currently in progress in Information Technology, Information Security, Computer Science, Software Engineering, or related fields.

• Experience with Linux environments, Docker, and containerization.

• Proficient in Git and CI/CD pipelines, specifically using Bitbucket or similar tools.

• Experience in vulnerability assessment and patch management.

• Familiarity with Cloudflare or comparable solutions.

• An analytical, proactive, and collaborative mindset, complemented by strong communication skills and the ability to interact comfortably with both technical and non-technical audiences.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and continuous learning.

• Flexible working hours and remote work options.

• A supportive and inclusive workplace culture.