ANALYST IN SAAS SECURITY

Stellantis; Betim; On-site; BRL 120,000 - 180,000; Full time

Job summary

Stellantis is seeking a Security Specialist for SaaS applications onsite in Betim, MG, Brazil. You will embed cybersecurity into the design, implementation, and lifecycle management of SaaS solutions, aligning with internal controls and industry best practices.

You will analyze vulnerabilities, build baselines, evaluate new SaaS apps, and conduct routine security audits, reporting metrics to management and ensuring standardized lifecycle processes.

Qualifications

• Bachelor's degree in a technology-related field is required or equivalent.
• Strong knowledge of SaaS security and cloud environments.
• Experience reviewing IT security and compliance documentation from a risk perspective.

Responsibilities

• Analyze SaaS applications for vulnerabilities and remediation.
• Build SaaS security baselines and alignment with standards.
• Evaluate new SaaS apps for security baselines.
• Identify risks and define remediation options for SaaS apps.
• Ensure configuration best practices and conduct routine audits.
• Validate incident response plans for SaaS platforms.
• Compile data for management reporting and security metrics.
• Ensure lifecycle management and auditing for SaaS apps.

Skills

SaaS security knowledge

Cloud security best practices

Risk assessment & remediation

IT security documentation review

Cloud architecture & governance

Software development basics

English proficiency

Education

Bachelor’s degree in a technology-related field

Tools

SOC 2

ISO 27001

NIST

CISSP/CCSP/CISA/CISM

Job description

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

The person in this role will be responsible for ensuring the security posture of key SaaS applications and platforms, working closely with IT teams and business partners to embed cybersecurity into the design, implementation, and lifecycle management of SaaS solutions, aligned with internal controls and industry best practices.

Main Responsibilities:

• Analyze SaaS applications for vulnerabilities, conduct security assessments, and recommend remediation measures;
• Build compliance requirements and SaaS application security baselines, ensuring alignment with defined standards;
• Evaluate new SaaS applications to ensure implementations meet security baselines;
• Identify risks and define remediation options for implemented SaaS applications;
• Ensure SaaS applications are configured according to best practices and perform routine audits of settings and features;
• Validate incident response plans and processes related to SaaS platforms;
• Compile and analyze data for management reporting and security metrics;
• Ensure SaaS applications follow standardized lifecycle management processes and auditing practices.

Requisitos:

We expect you to have:

• Knowledge of SaaS applications and their security considerations;
• Understanding of security best practices for modern cloud-based SaaS environments;
• Experience reviewing IT security and compliance documentation from a risk perspective;
• Knowledge of cloud environments, including architecture, services, security, and governance;
• Basic understanding of software development and application architecture;
• Bachelor’s degree completed in a technology-related field or equivalent;
• Advanced English proficiency;
• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Experience with SaaS platforms such as Microsoft 365, Salesforce, or Snowflake;
• Familiarity with security standards such as SOC 2, ISO 27001, or NIST;
• Knowledge of privacy regulations such as GDPR or CCPA;
• Experience with incident response, threat triage, or log analysis;
• Security certifications such as CISSP, CCSP, CISA, or CISM.