Senior Information Security Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design, implement, and manage technical security controls within hybrid and multicloud environments.

• Evaluate the security posture of AWS, Azure, and Google Cloud Platform environments.

• Identify potential risks and recommend mitigation strategies along with technical enhancements.

• Monitor and analyze security incidents using logs and alerts from tools such as SIEM, CloudTrail, Azure Monitor, Microsoft Defender, Google Cloud Logging, and Security Command Center.

• Carry out vulnerability management tasks, which include identifying, prioritizing, tracking remediation, and validating solutions.

• Create technical and executive reports detailing risks, vulnerabilities, and suggested improvements.

• Assist in both internal and external information security audits.

• Engage in the formulation and assessment of security policies, standards, and procedures.

• Collaborate with various teams to implement security measures effectively.

• Aid in security incident response initiatives.

• Manage EDR/XDR endpoint security controls.

• Act as a technical resource for information security incident response.

• Deploy, configure, and manage security tools.

⛳️ Requirements

• Bachelor’s degree in Computer Science or Computer Engineering.

• 3 to 5 years of relevant professional experience.

• Proficient knowledge of networking, Azure, AWS, GCP, Linux, Windows, EDR, cloud security, WAF, firewalls, and SIEM.

• Familiarity with IAM and PAM practices, including Entra ID, AD, MFA, SSO, RBAC, Conditional Access, password vaults, OAuth, and SAML.

• Experience with firewalls, WAF, VPN, and IDS/IPS.

• Background in risk management, security audits, incident management, information security policies, and compliance with Brazil’s LGPD.

• Experience with tools such as Microsoft Defender, Microsoft Sentinel, CrowdStrike or similar, as well as frameworks like OWASP, MITRE ATT&CK, and Snyk is a plus.

• Experience in structuring or enhancing Information Security functions, including developing processes, policies, metrics, controls, and collaborations with business units is advantageous.

• Demonstrated agility, adaptability, and resilience.

• Strong leadership and strategic vision.

• Excellent communication, negotiation, and interpersonal abilities.

🏝️ Benefits

• Psychotherapy.

• Life insurance.

• Vacation bonus.

• No dress code.

• Partnership with SESC.

• Refuturiza online learning platform.

• Meal/food allowance of BRL 31.00 for each working day and during vacation.

• Unimed health insurance with a monthly copay.

• Gympass/Wellhub access.

• Maternity kit for expectant mothers.

• DentalVidas dental insurance with a monthly copay.

• Ferias & Co.

• Cartão de Todos.

• Childcare assistance for mothers with children up to 12 months old.

• Birthday day off.