Vulnerability identification: Analyze systems, networks and applications to find vulnerabilities that could be exploited by attackers;
Threat prevention: Implement proactive security measures such as firewalls, antivirus, intrusion detection systems and security policies to prevent security threats;
Threat monitoring: Constantly monitor the network and systems to identify suspicious activity that may indicate an ongoing security breach;
Incident response: Develop incident response plans and act quickly to contain, investigate and remediate security incidents when they occur;
Security policy management: Develop and implement security policies, advise employees on best practices and promote a security-aware culture;
Training and awareness: Educate employees about security threats and the importance of safe technology practices;
Ticket management: Handle access control and shutdown requests, meeting the SLA and aging metrics established by the department;
Risk assessment: Perform risk assessments to identify and prioritize potential threats to the company’s information security;
Data security: Implement encryption, access controls and other measures to protect sensitive data;
Regulatory compliance: Support the legal team with matters related to LGPD (General Data Protection Law);
Continuous improvement: Stay up to date with security trends, new threats and emerging technologies, continuously adjusting the company’s security measures.

Bachelor’s degree in Computer Networks or Computer Engineering;
Certifications in Information Security / Cyber Security;
ISO 27000 certification and/or CompTIA Security+ (preferred);
Strong theoretical knowledge of network, host, database and cloud security;
Strong knowledge of SIEM solutions;
Experience with Microsoft 365 Defender;
Hands-on experience with Windows and Linux operating systems;
Knowledge of perimeter tools such as firewall, EDR, DLP, WAF, IDS and IPS;
Knowledge of host protection tools;
Advanced knowledge of Cyber Security and frameworks such as MITRE, OWASP, CIS, NIST series, among others;
Familiarity with software: EDR
Bitdefender, SentinelOne, Trend Micro; SIEM
Rapid7, Splunk, IBM QRadar; PAM
Vaultone, BeyondTrust, CyberArk, Senha Segura; IGA
Netadmin, Okta, Forcepoint.

Information Security Analyst (Mid-level)

Key skills