Mid-Level Infrastructure Analyst – Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assist the IT team in safeguarding the company’s IT landscape.

• Oversee the endpoint protection solution, ensuring comprehensive device coverage and effective threat remediation.

• Manage the security awareness platform, implementing phishing simulations and conducting training sessions.

• Supervise the security of office networks, including firewalls and wireless systems.

• Ensure asset adherence to security protocols.

• Administer vulnerability management, carrying out regular scans, risk analysis, and monitoring remediation activities.

• Monitor and respond to security events and alerts, including triage, investigation, documentation, and incident management.

• Oversee the security of the company’s tools, reviewing configurations, authentication methods, integrations, and controls.

• Manage and evaluate access rights and permissions, prioritizing privileges, authentication, and administrative accounts.

• Evaluate the risks associated with new tools, integrations, and vendors, aiding in the approval processes.

• Support initiatives related to Brazil’s General Data Protection Law (LGPD), as well as security frameworks and standards.

• Maintain and test incident response and business continuity plans.

• Document and refresh security policies, procedures, and processes.

• Identify and suggest enhancements to the company's security posture.

⛳️ Requirements

• Demonstrated experience in information security or IT infrastructure with an emphasis on security.

• Proven experience in managing endpoint protection solutions such as CrowdStrike, Sophos, ESET, or Kaspersky, including incident response.

• Familiarity with vulnerability management within an internal IT environment, covering devices, networks, and corporate applications.

• Solid knowledge of networking and network security, particularly in firewalls and wireless systems.

• Experience in managing access rights and permissions, inclusive of multi-factor authentication (MFA).

• Background in triaging, investigating, and resolving security alerts and incidents.

• Experience in developing and maintaining security policies and procedures.

• Preferred: familiarity with security awareness platforms, simulated phishing exercises, and training programs.

• Preferred: experience with security event monitoring tools (SIEM).

• Preferred: ability to assess the risks associated with new tools, integrations, and vendors.

• Preferred: experience with IT incident response and continuity strategies, including testing procedures.

• Preferred: experience in managing asset compliance.

🏝️ Benefits

• Meal/Food Allowance: BRL 1,300 per month on a flexible card, with no payroll deduction.

• Home Office Allowance: BRL 135 per month, with no payroll deduction.

• Health Insurance: Nationwide Bradesco plan.

• Dental Insurance: SulAmérica plan.

• Life Insurance.

• Extended parental leave, encompassing adoption, same-sex couples, and single-parent families.

• Childcare Allowance for children up to 5 years old.

• Gympass/Wellhub.

• Conexa Saúde, offering 2 free psychological consultations and 2 free nutritional consultations each month.

• Guapeco: nationwide pet health plan with reimbursements of up to 100%.

• Language school partnership, providing discounts on English and Spanish courses.

• Profit Sharing and Results Program (PLR).

• Relax Week: business days between Christmas and New Year’s Day off.

• Workstation Allowance of BRL 2,400, in addition to a company-provided laptop.

• Birthday day off.

• Great Place to Work certification.

• A culture of feedback, development guilds, and an individual development plan (IDP) during onboarding, along with Aurum Talks, OKR transparency, celebratory activities, performance reviews, and development programs.