Security Analyst, Mid-Level

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee security events, alerts, and incidents by conducting analyses and taking necessary actions as per established protocols.

• Identify, assess, and monitor vulnerabilities across various environments, systems, applications, and technology assets.

• Assist in the investigation, classification, remediation, and documentation of information security incidents.

• Aid in managing access and permissions.

• Conduct risk analyses related to information security, pinpointing threats, vulnerabilities, and potential impacts on business operations.

• Monitor action plans aimed at addressing risks, vulnerabilities, and nonconformities.

• Support security assessments for systems, applications, vendors, and new technology solutions.

• Prepare and maintain records, evidence, documentation, and reports pertaining to security activities.

• Aggregate and analyze information security metrics.

• Assist with both internal and external audits.

• Contribute to the promotion of information security best practices and initiatives aimed at raising security awareness.

• Aid in the review and continuous enhancement of security policies, procedures, controls, tools, and processes.

• Engage in low- to medium-complexity tasks and projects, elevating or assisting with more complex requests as necessary.

• Support management of identity, authentication, and access controls.

• Implement incident response lifecycle activities, including identification, containment, eradication, recovery, and root cause analysis.

• Coordinate vulnerability tracking, prioritizing vulnerabilities based on risk and overseeing remediation plans.

• Support the establishment and monitoring of security controls in cloud environments and SaaS platforms.

• Assist with personal data protection initiatives and ensure compliance with Brazil’s General Data Protection Law (LGPD).

• Facilitate security assessments of applications and advocate for secure development practices.

• Perform other relevant activities as assigned by the department.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Information Security, Computer Science, Information Systems, or a related discipline.

• Intermediate understanding of information security, networks, operating systems, infrastructure, and cloud computing.

• Experience in identifying, analyzing, and addressing security vulnerabilities, threats, and incidents.

• Familiarity with security tools such as SIEM, EDR/XDR, IAM, vulnerability management, and monitoring solutions.

• Experience with access management, multi-factor authentication (MFA), permission reviews, and identity controls.

• Knowledge of Microsoft 365 Security platforms, including Microsoft Entra ID, Microsoft Defender, Microsoft Intune, Conditional Access, and related solutions.

• Familiarity with cloud security environments like Azure, Oracle Cloud, or similar platforms.

• Understanding of information security frameworks, standards, and best practices, including ISO 27001, CIS Controls, and the NIST Cybersecurity Framework.

• Proficient in preparing technical reports, metrics, risk analyses, and action plans.

• Experience in tracking nonconformities, risks, vulnerabilities, and corrective actions.

• Preferred certifications: SC-900, SC-200, Security+, AZ-900, or ISO 27001 Foundation.

🏝️ Benefits

• Health insurance for you and your dependents (no monthly premium 👀).

• Dental insurance for you and your dependents (no monthly premium 👀).

• Meal/food allowance.

• TotalPass.

• Emotional wellness program for you and your dependents.

• Life insurance.

• Day off during your birthday month.

• Education allowance.

• Home office allowance.

• Transportation allowance.

• Parking allowance.

• Flexible hybrid or remote work options.

• A relaxed and friendly work environment.

• A culture centered on Innovation, Excellence, Commitment, and Teamwork.

• Join a company that is experiencing significant growth.