Infrastructure and Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Implement and oversee security controls in AWS, including VPC, EC2, S3, RDS, Lambda, IAM, CloudFront, GuardDuty, and Organizations.

• Enforce CSPM rules and guarantee the security of Kubernetes workloads (EKS).

• Collaborate with DevOps teams to address vulnerabilities in container images.

• Organize and audit permissions in accordance with the principle of least privilege.

• Manage AWS Identity Center and implement/administer AWS Secrets Manager.

• Lead the containment and investigation of critical incidents, such as data breaches, phishing, and DDoS attacks.

• Integrate security tools with the QRadar SIEM, fine-tuning alerts to minimize false positives.

• Operate CrowdStrike Falcon (EDR/CSPM), Qualys, and BitSight.

• Coordinate penetration testing (Red Team) activities with external providers.

• Facilitate vulnerability remediation alongside development teams.

• Develop and maintain policies, procedures, and runbooks.

• Assist in regulatory audits, including those from the Central Bank, ensuring compliance with LGPD, CIS Controls, NIST, and OWASP Top 10.

• Create Python/Bash scripts to automate compliance checks, violation alerts, and operational security tasks.

• Evaluate architectural risks during Change Management (GMUD) processes prior to production deployments.

⛳️ Requirements

• Solid understanding of AWS architecture, Terraform, Docker, Kubernetes (EKS), and Linux systems administration.

• Practical experience with CrowdStrike (EDR and CSPM), QRadar SIEM, Qualys, BitSight, AWS Secrets Manager, WAF (Signal Sciences / AWS WAF), and VPN/DNS solutions.

• Expertise in Python and Bash for automating security tasks and conducting log analysis.

• Applied knowledge of NIST, CIS Controls, OWASP Top 10, Zero Trust architecture, and LGPD regulations.

• Advanced proficiency in English (reading, writing, and technical communication).

• Prior experience in supporting Financial Sector audits (Central Bank) is advantageous.

• Industry certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), CISSP, or CompTIA Security+ are beneficial.

• Experience within the Financial Sector is a plus.

🏝️ Benefits

• PJ contractor engagement.

• Remote work.