Cybersecurity Analyst – Mid-Level

Jobtailor; São Paulo; Presencial; BRL 120 000 - 160 000; Tempo integral

Resumo da oferta

Jobtailor in São Paulo, Brazil, is looking for a hands-on vulnerability management specialist to monitor scans, support remediation, and produce technical reports for diverse clients.

You will work with Tenable, Qualys and related tools, maintain dashboards, and collaborate with internal teams to strengthen security postures.

Qualificações

• Hands-on experience with Tenable VM/One/Nessus, Qualys and other vulnerability management and ASM tools
• Knowledge of the vulnerability management lifecycle (identification - analysis - prioritization - remediation - validation)
• Understanding of CVSS, EPSS and CISA KEV
• Ability to produce technical reports and communicate findings clearly
• Familiarity with WAF/WAAP solutions, microsegmentation and phishing simulation/campaign tools
• Technical English for reading documentation, security advisories and CVEs

Responsabilidades

• Monitor and review periodic vulnerability scans in client environments using Tenable and other scanning tools
• Support clients throughout the entire vulnerability management lifecycle: policy configuration, authentication, asset classification, prioritization, false-positive triage, validation of remediation effectiveness, and other related activities
• Participate in regular status meetings with clients (vulnerability management program governance)
• Maintain dashboards and exposure metrics up to date within the tools
• Deploy, operate, and support solutions such as Guardicore, Vicarius, GAT Core, Akamai, and KnowBe4
• Produce technical and executive vulnerability reports for assigned clients
• Track and follow up on remediation plans with clients' IT teams
• Perform health checks on tools for clients
• Collaborate with internal teams

Conhecimentos

vulnerability management

vulnerability scanning

policy configuration

asset classification

remediation validation

technical reporting

microsegmentation

phishing simulation

CVSS

CISA KEV

Ferramentas

Tenable VM/One/Nessus

Qualys

Guardicore

Vicarius

GAT Core

Akamai

KnowBe4

Descrição da oferta de emprego

• Monitor and review periodic vulnerability scans in client environments using Tenable and other scanning tools
• Support clients throughout the entire vulnerability management lifecycle: policy configuration, authentication, asset classification, prioritization, false-positive triage, validation of remediation effectiveness, and other related activities
• Participate in regular status meetings with clients (vulnerability management program governance)
• Maintain dashboards and exposure metrics up to date within the tools
• Deploy, operate, and support solutions such as Guardicore, Vicarius, GAT Core, Akamai, and KnowBe4
• Produce technical and executive vulnerability reports for assigned clients
• Track and follow up on remediation plans with clients' IT teams
• Perform health checks on tools for clients
• Collaborate with internal teams

Requirements

• Hands‑on experience with Tenable VM/One/Nessus, Qualys and other vulnerability management and ASM (Attack Surface Management) tools
• Knowledge of the vulnerability management lifecycle (identification - analysis - prioritization - remediation - validation)
• Understanding of CVSS, EPSS and CISA KEV
• Ability to produce technical reports and communicate findings clearly
• Familiarity with WAF/WAAP solutions, microsegmentation and phishing simulation/campaign tools
• Technical English for reading documentation, security advisories and CVEs

Hard Skills

• vulnerability management
• vulnerability scanning
• policy configuration
• asset classification
• remediation validation
• technical reporting
• microsegmentation
• phishing simulation
• CVSS
CISA KEV

Soft Skills

• communication
• collaboration
• client support
• problem-solving
• organization