Monitor and analyze security events from tools such as SIEM, EDR, XDR and corporate antivirus
Perform analysis and incident response for security incidents, including investigation, containment and post-incident lessons learned
Support the operation and review of technical and administrative security controls
Conduct and support vulnerability assessments and follow up on remediation plans
Support information security risk management processes, including risk identification, assessment and treatment
Contribute to GRC activities, such as supporting the maintenance of Information Security policies, standards and procedures
Provide technical support for internal and external audits by supplying required evidence
Track action plans and non-conformities
Support initiatives related to compliance with standards and frameworks (ISO 27001, NIST, LGPD, CIS Controls)
Support identity and access management (IAM) processes and periodic privilege reviews
Prepare technical reports, security metrics and process documentation
Promote a culture of Information Security and deliver awareness activities

Previous experience as an Information Security Analyst or in a similar role
Knowledge of: Cybersecurity fundamentals, networking and operating systems (Windows and Linux)
Log and security event analysis
Experience with SIEM and EDR/XDR tools
Vulnerability management, CVEs and system hardening
Concepts of Risk Management, Compliance and Security Controls
Basic to intermediate knowledge of standards and frameworks such as ISO 27001, NIST, LGPD
Certifications are a plus

Information Security Analyst, Mid-level

Key skills