Information Security Analyst

Jobtailor; Maringá; Presencial; BRL 150 000 - 230 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a skilled security incident response professional to lead incident management across detection, analysis, containment and recovery. You will investigate using log analysis, forensics, and threat intelligence to determine root causes and impact.

The role includes developing response playbooks, supporting secure software development, and prioritizing remediation based on risk. You will collaborate across teams to implement controls, monitor metrics, and strengthen cloud and

Qualificações

• Minimum Bachelor’s degree in IT, Engineering, Information Security or related field.
• Experience handling security incidents in high-demand environments.
• Proficient in log analysis, event correlation and SIEM tools.

Responsabilidades

• Lead the security incident management lifecycle: detection, analysis, containment, eradication and recovery.
• Investigate incidents with log analysis and forensics, identify root causes and impact.
• Develop and maintain incident response plans, playbooks, and operating procedures.
• Perform vulnerability assessments and monitor security metrics to prioritize remediation.
• Support secure SDLC practices, addressing OWASP Top 10 risks.

Conhecimentos

Defensive Security

Security Monitoring

Incident Response

Log Analysis

Scripting

Formação académica

Bachelor's degree in IT / Security

Ferramentas

SIEM Tools

SOAR

Threat Intelligence

Digital Forensics

Descrição da oferta de emprego

• Lead the security incident management lifecycle-detection, analysis, containment, eradication, and recovery-ensuring a timely response and proper documentation
• Investigate incidents through log analysis, event correlation, and digital forensics techniques, identifying root cause and impact
• Develop and maintain incident response plans, playbooks, and operating procedures aligned with industry frameworks
• Execute and monitor penetration tests (pentests) and vulnerability scans, prioritizing remediation based on risk
• Support development teams in adopting secure software development practices, providing guidance on mitigating OWASP Top 10 vulnerabilities
• Assess configurations, system hardening, and security controls, proposing sustainable improvements
• Monitor security metrics and produce management reports and dashboards to support decision-making
• Contribute to the implementation and monitoring of controls based on frameworks such as NIST and industry best practices
• Collaborate with other departments, promoting a security culture and supporting strategic decisions
• Create and maintain technical documentation that supports the standardization and scalability of security processes
• Identify bottlenecks and risks, proposing innovative solutions to strengthen the protection of the environment

Requirements

• Bachelor's degree in Information Technology, Engineering, Information Security, or a related field
• Strong experience in defensive security, security monitoring (SOC/Blue Team), or incident response
• Experience managing security incidents in high-demand environments
• Previous experience with vulnerability assessment and monitoring security metrics
• Familiarity with penetration testing (pentesting), networks, operating systems, and hardening concepts
• Knowledge of secure software development and OWASP guidelines
• Knowledge of frameworks and best practices such as NIST (CSF), ISO 27001, or equivalent standards
• Proficiency in log analysis, event correlation, and SIEM tools
• Industry certifications (e.g., Security+, CEH, GCIH, OSCP, or similar) - a plus
• Experience with security automation, SOAR, or threat intelligence solutions - a plus
• Experience with cloud environments (AWS, Azure, or GCP) and container security - a plus
• Knowledge of scripting (Python, PowerShell) for automating security tasks - a plus

Core Competencies

Demonstrates expertise in security incident management, including detection, analysis, and recovery, while ensuring adherence to frameworks such as NIST and ISO 27001. Proficient in developing incident response plans and promoting secure software development practices aligned with OWASP guidelines.

Highest-signal resume keywords

• Security Incident Management
• Vulnerability Assessment
• Penetration Testing
• Log Analysis
• Secure Software Development

Hard Skills

• Defensive Security
• Security Monitoring
• Incident Response
• Event Correlation
• SIEM Tools
• Scripting (Python, PowerShell)
• Cloud Security (AWS, Azure, GCP)
• Digital Forensics
• System Hardening
• Security Automation

Soft Skills

• Collaboration
• Problem-Solving
• Communication
• Innovative Thinking
• Leadership

Certifications & Qualifications

• Security+
• CEH
• GCIH
• OSCP

Industry Keywords

• NIST
• ISO 27001
• OWASP Top 10
• Incident Management Lifecycle
• Security Culture

Tools & Technologies

• SOAR
• Threat Intelligence Solutions
• Security Metrics Dashboards
• Incident Response Playbooks
• Technical Documentation