Senior Cybersecurity Analyst – Affirmative Action Position for People with Disabilities

Role Overview

• Lead cloud security posture management (CSPM), acting as the technical liaison between consultants and IT teams to define mitigation plans, validate recommendations, and implement effective compensating controls.
• Ensure the integrity of the IT environment lifecycle by orchestrating remediation of complex vulnerabilities and anticipating end-of-life risks for systems, applications, and infrastructure with support teams.
• Mitigate supply chain risks by assessing vendors' cybersecurity maturity against global frameworks (ISO 27001, NIST, CIS) and establishing action plans to ensure partner compliance.
• Ensure Security by Design in new projects by defining technical requirements and testing controls prior to production deployment to prevent exposure of vulnerabilities in the healthcare environment.
• Lead strategic response to complex incidents, orchestrating crisis/incident response rooms, defining containment and eradication actions, and producing post-mortem reports to strengthen the defensive architecture.
• Enable the evolution of the cybersecurity architecture by performing comparative studies of new technologies and supporting the implementation of cutting-edge solutions, ensuring deliveries adhere to industry best practices.
• Support regulatory compliance and audits, serving as the technical focal point for evidence collection and responses to internal and external reviews, aiming to maintain certifications and compliance with ANS regulations and the LGPD.
• Promote stability of security tools by managing requests for critical adjustments and configurations with partners, ensuring high availability of protective controls.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, Information Systems, or Cyber Defense.
• Experience managing cybersecurity tools such as ZTNA, NAC, XDR, WAF, CSPM, and PAM.
• Experience with Vulnerability Management and Cyber Incident Response processes.
• Strong knowledge of security frameworks: ISO 27001, NIST, CIS, MITRE ATT&CK, and OWASP.
• Strong knowledge of Cloud Computing and Cloud Security.
• Advanced English (will participate in meetings with foreign vendors).
• Preferred:
• Previous experience with Akamai WAF and ZTNA solutions such as Netskope or Palo Alto.
• Experience in healthcare and hospital environments.
• Postgraduate studies in progress in Cybersecurity, Information Security, Cyber Defense, or Ethical Hacking.

Tech Stack

• Cloud

Benefits

• N/A