This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee and implement information security initiatives for a major client.

• Take charge of the complete operation of security tools.

• Manage security partnerships from start to finish.

• Administer policies for EDR, proxy/SWG/CASB, and DLP.

• Oversee vulnerability management and coordinate penetration testing.

• Address real-world incidents within a corporate setting.

• Act as the primary contact for partners, an MSSP, or an outsourced SOC.

• Engage in audits pertaining to Brazil’s LGPD, ISO 27001, and NIST.

• Develop detection rules in a SIEM, as necessary.

• Automate processes using PowerShell or Python, as applicable.

⛳️ Requirements

• Minimum of 6 years of experience in information security, with at least 3 years in technical operations—not limited to GRC.

• Practical experience in administering EDR solutions (CrowdStrike Falcon preferred; SentinelOne, Defender for Endpoint, or equivalents also considered).

• Direct experience in administering proxy/SWG/CASB solutions (Skyhigh/McAfee preferred; Zscaler, Netskope, Forcepoint, or equivalents also considered), including endpoint proxy configuration.

• Experience in implementing and refining DLP policies.

• Proficient in vulnerability management (Tenable, Qualys, Rapid7, or equivalents) and supervision of penetration tests.

• Experience in managing real-world incidents in a corporate environment.

• Proven ability to act as the main liaison for partners, an MSSP, or an outsourced SOC.

• Working knowledge of Brazil’s LGPD, ISO 27001, and NIST, with involvement in audits.

• Ability to work independently or within a small team, with a significant level of autonomy.

• Experience with SIEM (Splunk, Sentinel, QRadar, or equivalents) and creation of detection rules.

• Knowledge of security for Microsoft 365/Entra ID and cloud platforms (Azure or AWS).

• Proficiency in automation scripting using PowerShell or Python.

• Experience in the healthcare or pharmaceutical industries, or handling sensitive data.