Senior Analyst – Information Security

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Act as the technical authority for cloud security at Grupo SBF

• Establish infrastructure security controls and standards

• Collaborate with platform and SRE teams to enforce controls through code

• Manage cloud incidents comprehensively from start to finish

• Assess posture findings, infrastructure vulnerabilities, and penetration test results

• Identify risks in context and direct remediation initiatives to the appropriate teams with SLAs

• Oversee security design evaluations for architectures, environments, public exposures, and services handling sensitive data

• Create preventive guardrails at both the organizational and account levels

• Maintain version-controlled hardening baselines and conduct periodic reviews

• Evaluate IaC and establish security gates within the pipeline, including IaC scanning and policy-as-code

• Formulate least-privilege policies and conduct regular access reviews

• Implement controls for clusters, images, admission control, and runtime security

• Keep a catalog of detection use cases for the cloud control plane and develop runbooks

• Lead incident management, including scoping, investigation, evidence preservation, containment, eradication, and post-mortems

• Organize tabletop simulation exercises

• Ensure the security of CI/CD pipeline identities and permissions

• Monitor posture and response metrics, maintaining evidence for audits and LGPD compliance

• Assist security points of contact, facilitate office hours and training sessions, develop standards and playbooks, and communicate risks to leadership

• Serve as a consultant, emphasizing automated guardrails over manual approvals

• Mentor others and share expertise with the team

⛳️ Requirements

• A minimum of 5 years of experience in information security, with at least 3 years focused on public cloud security in a large-scale production setting

• Extensive knowledge of GCP or AWS, with the capability to apply concepts to the other provider

• Proficient understanding of IAM, including non-human identities, cloud networking, encryption/KMS, and native logging

• Hands-on experience with Kubernetes and container security, particularly admission control

• Automation proficiency using Terraform and Python or Go, including security controls in CI/CD pipelines

• Experience in managing vulnerabilities and security posture with SLAs, context-based prioritization, and remediation tracking

• Experience in responding to cloud incidents and conducting investigations using audit logs

• Practical knowledge of CIS Benchmarks, MITRE ATT&CK for Cloud, and NIST CSF 2.0

• Familiarity with LGPD

• Certifications such as Google Professional Cloud Security Engineer, AWS Security Specialty, CKS, CCSP, or CCSK are advantageous

• Knowledge of detection-as-code and experience with SIEM are beneficial

• Experience in container runtime security is a plus

• Experience securing AI workloads is a plus

• Background in software supply chain security, including SBOMs and image signing, is a plus

• Experience in regulated environments, such as PCI DSS, and in high-volume retail/e-commerce is a plus

🏝️ Benefits

• Competitive salary and performance-based bonuses

• Comprehensive health and wellness programs

• Opportunities for professional development and training

• Flexible working hours and remote work options

• Engaging company culture with team-building activities