Information Security Analyst – DevSecOps

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Implement and uphold DevSecOps methodologies throughout the software development lifecycle.

• Manage and safeguard production and staging environments, ensuring the infrastructure's security and reliability.

• Monitor and address vulnerabilities in systems, servers, containers, and third-party libraries, executing updates, patches, and fixes as necessary.

• Automate security assessments within CI/CD pipelines using SAST, DAST, and SCA tools.

• Configure and oversee Cloudflare along with secure storage mechanisms for keys, secrets, and certificates.

• Establish and enforce hardening policies for servers, containers, and services.

• Assist in the management and response to security incidents.

• Advise the development team on security best practices and engage in architecture reviews from an information security standpoint.

• Support less technical users with guidance and recommendations concerning platform security.

⛳️ Requirements

• Bachelor's degree completed or currently pursuing in Information Technology, Information Security, Computer Science, Software Engineering, or related disciplines.

• Experience with Linux environments, Docker, and container technologies.

• Proficient in Git and CI/CD workflows, utilizing Bitbucket or similar tools.

• Background in vulnerability analysis and patch management.

• Familiarity with Cloudflare or comparable solutions.

• Analytical, proactive, and collaborative individual with excellent communication skills, capable of interacting with both technical and non-technical audiences.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional growth and development.

• Collaborative and inclusive work environment.