Senior Information Security Administrator

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Ensure the ongoing functionality, security, and advancement of the information technology infrastructure, guaranteeing availability, up-to-date status, and alignment with operational requirements.

• Develop and enforce hardening policies for operating systems, servers, and network devices.

• Configure and oversee endpoint protection solutions, including antivirus, EDR, XDR, and device control tools.

• Apply security patches and updates to endpoint operating systems and applications.

• Conduct regular scans to identify vulnerabilities and threats.

• Monitor security events, logs, and activities across endpoints, privileged accounts, and network environments.

• Document incidents, offer technical mitigation suggestions, and assist in forensic investigations.

• Create and maintain incident response playbooks for ransomware, APTs, and other advanced threats.

• Facilitate incident simulation tests and tabletop exercises.

• Prepare and present technical reports on incidents, attack vectors, impacts, and preventive strategies.

• Develop and present materials on the endpoint environment, current status, relevant events, and improvements.

• Monitor the NVD, vendor alerts, and CVEs to pinpoint critical vulnerabilities.

• Validate the effectiveness of remediations in controlled environments prior to production deployment.

• Evaluate the impacts of vulnerabilities in accordance with Brazil’s LGPD, ABNT NBR ISO/IEC 27001, and other relevant standards.

• Configure and manage network segmentation, including VLANs, security zones, and DMZs.

• Implement and enhance NDR solutions.

• Configure and manage IAM with RBAC and ABAC policies.

• Implement and optimize PAM, including automated password rotation and secure vaults.

• Design and execute MFA workflows integrated with critical systems.

• Manage user lifecycles, including provisioning and deprovisioning.

• Conduct permission audits and modify PAM policies.

⛳️ Requirements

• Bachelor’s degree in Information Technology (IT), Computer Science, Information Systems, or a related field.

• Proven experience in information security.

• Experience must be validated through a service-provider contract or employment history, detailing the start and end dates of the position.

• Official ITIL 4 Foundation certification or higher.

• Advanced, Professional, Expert, or equivalent certification for an endpoint protection solution.

• One of the following certifications: ECSA (EC-Council Certified Security Analyst), CySA+ (CompTIA Cybersecurity Analyst), ECIH (EC-Council Certified Incident Handler), or CSIH (Certified Specialist Incident Handler).

• Proficient knowledge of Windows and Linux operating systems.

🏝️ Benefits

• Hapvida, Bradesco Saúde, or Unimed health insurance (depending on local availability).

• Hapvida Odonto or Bradesco Dental insurance.

• Alelo meal or food allowance.

• Life insurance fully covered by Lanlink.

• Transportation allowance.

• Pharmacy benefit.

• University partnership benefits.

• TotalPass.

• Internal learning platform.

• Moodar platform (therapy platform).