Analista de Segurança

• **This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Analista de Segurança based in Brazil.**
• We are seeking a Security Analyst to support the implementation, operation, and continuous improvement of Information Security initiatives within a technology-driven environment.
• This role combines operational execution and strategic contribution, helping strengthen security controls, processes, and corporate protection practices.
• You will collaborate closely with Infrastructure, DevOps, Engineering, Product, and Operations teams to transform security guidelines into practical solutions.
• The position offers the opportunity to work across multiple security domains, including cloud security, vulnerability management, IAM, application security, and compliance.
• You will contribute to protecting systems, applications, data, and operations while supporting a culture of security awareness and continuous improvement.
• Working in a collaborative environment, you will help identify risks, improve resilience, and evolve security practices across the organization.
• This is an opportunity to grow professionally while making a meaningful impact on cybersecurity and technology reliability.

### Accountabilities

• Support the implementation, maintenance, and evolution of Information Security processes, controls, and initiatives.
• Monitor security events and alerts, contribute to incident response activities, and support investigation processes.
• Participate in post-incident analysis and help identify opportunities for improving security practices.
• Support vulnerability management activities, including security scans, assessments, remediation tracking, and environment exposure monitoring.
• Assist with periodic security reviews and contribute to improving vulnerability management processes.
• Support Identity and Access Management (IAM) activities, including access reviews, onboarding and offboarding processes, MFA initiatives, and privilege management improvements.
• Assist in validating cloud environment configurations, infrastructure hardening activities, and security protection controls.
• Support application security initiatives, including AppSec and DevSecOps practices, vulnerability remediation, and security reviews during development projects.
• Assist with security analysis tools, code analysis, and dependency scanning processes.
• Support governance and compliance activities, including policy maintenance, audit evidence preparation, ISO 27001 initiatives, LGPD requirements, and risk management controls.
• Contribute to business continuity and resilience initiatives, including backup testing, disaster recovery validation, and recovery process improvements.

## **Requirements:**

• Bachelor’s degree in Computer Science, Computer Networks, Information Systems, or related fields.
• Solid experience in Information Security within corporate environments.
• Previous experience working with Infrastructure, DevOps, or Security teams.
• Practical knowledge of:
• Networks and infrastructure.
• Windows and Linux operating systems.
• Identity and Access Management (IAM).
• Vulnerability management.
• Cloud security concepts.
• SIEM and security monitoring concepts.
• Backup and business continuity practices.
• LGPD requirements.
• Application Security (AppSec) and DevSecOps practices.
• Ability to analyze risks, identify improvement opportunities, and translate security strategies into practical actions.
• Strong communication skills and ability to collaborate with different technical and business teams.
• Organized, detail-oriented, and proactive approach to problem-solving.
• Curiosity and willingness to learn new technologies and continuously improve security practices.
• Interest in professional growth within the Information Security field.
• Certifications such as Security+, SC-900, AZ-500, or equivalent are a plus.
• Cloud certifications such as AWS Certified SysOps Administrator or Microsoft Certified: Azure Administrator Associate are a plus.
• ITIL Foundation certification is a plus.
• Virtualization certifications such as VMware VCP are a plus.
• Networking certifications such as Cisco CCNA are a plus.
• Experience applying Artificial Intelligence to threat detection and post-incident analysis is a plus.

## **Benefits:**

• Full-time employment under a formal employment contract.
• Fully remote work model.
• Health insurance fully covered for the employee.
• Monthly home office allowance.
• Meal and food allowance.
• Wellhub (Gympass) wellness benefit.
• Childcare assistance for children up to 5 years and 11 months.
• Birthday day off.
• Extended paternity leave.
• Continuous training and professional development opportunities.
• Psychological, financial, and legal support programs.
• Access to cultural, leisure, and wellness benefits through partner programs.
• Collaborative and inclusive environment focused on innovation and professional growth.