Information Security Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Spearhead the execution of cyber defense strategies utilizing SIEM, EDR, XDR, DLP, WAF, and firewalls.

• Perform penetration testing and vulnerability assessments, pinpointing and addressing security weaknesses.

• Ensure adherence to Brazil’s LGPD, PCI, and ISO 27001 regulations, while conducting assessments and audits based on NIST, CIS Controls, and other frameworks.

• Partner with development teams to integrate security protocols within DevSecOps practices.

• Supervise access and identity management, permissions, and regular reviews.

• Address security incidents by conducting forensic analyses and enacting corrective actions.

• Formulate and assess security policies and procedures.

• Create information security awareness programs and training initiatives.

• Evaluate and implement security solutions tailored for cloud environments using CSPM.

• Offer technical support and guidance to junior team members.

• Apply MITRE ATT&CK, Threat Intelligence, and engage in Threat Hunting activities.

• Carry out forensic investigations encompassing memory, logs, and malware analysis.

• Utilize advanced cryptographic methods, including PKI, SSL/TLS, and multifactor authentication.

• Uphold the Code of Conduct guidelines and advocate for CSC’s culture, mission, and values.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Computer Engineering, or a related discipline.

• A graduate degree or specialization in Information Security is advantageous.

• Entry-level or intermediate certification (Security+, CC, CySA+, DCPT, CEH).

• Advanced information security certifications (CISSP, OSCP, CISM) are highly preferred.

• Minimum of 6 years of experience in the field of information security.

• Proficiency in protection and attack layers.

• Understanding of network layers and data packets.

• Familiarity with attack methodologies.

• Knowledge of security communication and training tools.

• Experience in access and identity management.

• Insight into application architecture and secure development practices.

• Understanding of cloud security management (AWS, Azure, GCP).

• Competence in cyber defense and threat protection.

• Awareness of compliance and regulatory requirements.

• Experience in security assessments within software development and DevSecOps.

• Skills in threat analysis and intelligence.

• Familiarity with monitoring and protection tools (antivirus, firewalls, etc.).

• Experience with penetration testing and vulnerability assessment.

• Knowledge of security incident response protocols.

• Proficiency in forensic investigations (memory forensics, log analysis, and malware analysis).

• Familiarity with cryptography (PKI, SSL/TLS, multifactor authentication).

• Experience with audits and assessments using frameworks (NIST, CIS Controls).

• Ability to develop security policies and procedures.

• Experience with Kubernetes and containerized environments is a plus.

• Participation in ISO 27001, ISO 27017, or SOC 2 audits is favorable.

• Knowledge of WAF, CDN, and web application protection is desirable.

• Intermediate or advanced English proficiency for technical reading is a plus.

• Essential skills include complex problem-solving, critical analysis, innovation, strategic thinking, prioritization, emotional intelligence, autonomy, effective communication, project leadership, mentoring, process management, empathy, ownership, proactivity, flexibility, collaboration, continuous learning, ethics, integrity, confidentiality, results orientation, and performance focus.

🏝️ Benefits

• Remote or hybrid work options available exclusively for candidates residing in Brazil.

• Flexible working hours.

• Health insurance extendable to eligible dependents.

• Dental insurance extendable to eligible dependents.

• Life insurance extendable to eligible dependents.

• Medication assistance available for sons and daughters.

• Transportation allowance or parking assistance for employees living in cities with company offices.

• Flexible meal and food allowances.

• Access to Wellhub (formerly Gympass).

• Membership to TotalPass.

• Day off during the birthday month, on a date chosen by the employee.

• NeoBaby parental support program.

• Unico Skill, an educational solution for external training.

• Childcare assistance in accordance with applicable policy.

• Extended parental leave: 6 months for mothers and 30 days for fathers.

• Employee referral program.

• Bonus opportunities.