Cybersecurity Analyst

IQVIA; São Paulo; On-site; BRL 90,000 - 150,000; Full time

Job summary

IQVIA in São Paulo, Brazil seeks a Vulnerability Management Analyst to support day-to-day operations of vulnerability management, external attack surface management, CTEM and penetration testing oversight. You will triage findings, coordinate remediation with asset owners, and monitor threat intelligence.

Required: 2 years in IT/security, fluent English, degree or equivalent, and knowledge of CVSS/OWASP. Proficiency with scanning tools, EASM, and ITSM is expected.

Qualifications

• Bachelor’s degree or equivalent experience required.
• 2 years of related work experience in IT or information security.
• Fluent English, written and spoken.
• Experience with vulnerability management/scanning tools; EASM; Threat Intelligence Platforms or feeds; ITSM ticketing.
• Knowledge of networking (TCP/IP, DNS, TLS), Windows and Linux, web apps and cloud basics.
• Understanding of CVSS, EPSS, known-exploited vulnerability catalogs and OWASP Top 10.
• Exposure to CSPM/CNAPP, CTEM platforms, scripting (Python, PowerShell) and BI reporting.
• Certifications such as CompTIA Security+, CySA+, GSEC or similar preferred.

Responsibilities

• Operate vulnerability and external attack surface scanning; monitor tool health and coverage.
• Triage, validate and prioritize findings using severity, threat intelligence and asset criticality.
• Identify asset owners and coordinate remediation tickets against SLAs.
• Support penetration testing: gather scope, schedule tests, track findings and remediations.
• Monitor threat intelligence for newly exploited vulnerabilities and assess impact.
• Maintain SOPs and produce dashboards/reports on exposure, aging and SLA adherence.
• Escalate high-risk exposures and contested findings to the Senior Analyst.

Skills

Fluent English

2 years IT security

Networking knowledge

Windows and Linux

Cloud basics

CVSS/EPSS/OWASP Top 10

Scripting (Python/PowerShell)

Education

Bachelor’s Degree in Computer Science or related field, or equivalent experience

Tools

Vulnerability Management Tools

External Attack Surface Management (EASM)

Threat Intelligence Platforms/Feeds

ITSM ticketing

Job description

Supports the day-to-day operation of the Vulnerability Management, Attack Surface Management, Continuous Threat Exposure Management (CTEM) and Penetration Testing oversight capabilities.

Essential Functions

• Operate vulnerability and external attack surface scanning; monitor tool coverage and health, and identify unknown, unmanaged or misconfigured internet-facing assets.
• Triage, validate and prioritize findings using severity, exploitability, threat intelligence and asset criticality; filter out false positives.
• Identify asset owners and raise, track and follow up remediation tickets against agreed SLAs.
• Support the penetration testing program: collect scope details, schedule tests, track findings through remediation and coordinate retests.
• Monitor threat intelligence for newly exploited vulnerabilities and assess impact on the organization’s assets.
• Maintain Standard Operating Procedures and produce dashboards and KPI reports on exposure, aging and SLA adherence.
• Escalate high-risk exposures and contested findings to the Senior Analyst.

Qualifications

• Bachelor’s Degree in Computer Science, a related field, or equivalent experience – Req
• Equivalent work experience may substitute for degree – Pref
• 2 years of related work experience in IT or information security – Req
• Fluent English, written and spoken – Req
• Experience with: Vulnerability Management / scanning tools; External Attack Surface Management (EASM); Threat Intelligence Platforms or feeds; IT Service Management (ITSM) ticketing – Req
• Knowledge of networking (TCP/IP, DNS, TLS), Windows and Linux, web applications and cloud basics – Req
• Understanding of CVSS, EPSS, known-exploited vulnerability catalogs and OWASP Top 10 – Req
• Exposure to CSPM/CNAPP, Exposure Management / CTEM platforms, scripting (Python, PowerShell) and spreadsheet / BI reporting – Pref
• CompTIA Security+ – Req Or
• CompTIA CySA+ – Req Or
• GIAC Security Essentials (GSEC) – Req
• CompTIA PenTest+, eJPT, CEH or a cloud fundamentals security certification – Pref

IQVIA is committed to fostering a diverse and inclusive work environment. Our goal is to attract and retain the best talent, regardless of gender, race, marital status, ethnic origin, nationality, age, disability, sexual orientation, gender identity, or any other characteristic.

IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com

IQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism.