Senior Information Security Analyst
São Paulo, São Paulo, Brazil
Full Time
3 weeks ago
No Sponsorship
Key skills
AWSAzureCloudFirewallsGoogle Cloud PlatformOpen SourcePythonSDLCTerraformBashGCPGoogle CloudIAMLeadershipRisk ManagementCommunicationWAF
About this role
Role Overview
- Lead the implementation and evolution of Information Security policies
- Design and maintain the security governance program (based on ISO 27001, NIST, LGPD)
- Perform advanced risk analyses and propose mitigation plans
- Coordinate and execute vulnerability assessments and penetration tests (open source and commercial tools)
- Implement and manage firewalls, IDS/IPS, SIEM and monitoring solutions
- Lead incident response and business continuity plans
- Act as a technical reference for infrastructure and development teams (DevSecOps)
- Define security standards for applications, networks and infrastructure
- Deliver internal security awareness training
- Support audits, compliance and regulatory adjustments
- Evaluate security vendors and solutions
Requirements
- Bachelor’s degree in IT, Information Security, or related field
- Minimum of 6 years of experience in Information Security and Infrastructure
- Experience in cloud environments
- Technical leadership and decision-making ability
- Strong systems thinking and strategic mindset
- Excellent communication with technical and business stakeholders
- Proficiency with ISO 27001, NIST and LGPD
- Security architecture in cloud (AWS, Azure, GCP or OCI)
- Management of firewalls, VPNs, IDS/IPS, WAF and SIEM
- DevSecOps and Secure SDLC
- Vulnerability analysis and incident response
- Security risk management
- PKI, cryptography, SSL/TLS
- Identity and access management (IAM)
- Monitoring, logging and event correlation
- Patch management and hardening
- Automation of security processes (Python, Bash, Terraform, etc.)
Tech Stack
- AWS
- Azure
- Cloud
- Firewalls
- Google Cloud Platform
- Open Source
- Python
- SDLC
- Terraform
Benefits
- Not provided