Information Security Analyst (Pleno)

Jobtailor; São Paulo; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a security specialist to identify vulnerabilities in systems/networks, implement proactive protections, monitor for threats, and coordinate incident response. You will help shape security policies, train staff, and support LGPD compliance.

The role requires hands-on experience with SIEM, EDR tools, and defense-in-depth strategies across Windows and Linux environments. Hybrid work is possible in São Paulo.

Qualificações

• Degree in Computer Networks or Computer Engineering.
• Certifications in Information Security / Cyber Security.
• ISO 27000 and/or Security+ certification (desired).
• Strong theoretical knowledge of network, host, database and cloud security.
• Strong knowledge of SIEM solutions.
• Experience with Microsoft 365 Defender.
• Practical experience with Windows and Linux operating systems.
• Knowledge of perimeter tools such as firewalls, EDR, DLP, WAF, IDS and IPS.
• Knowledge of host protection tools.
• Advanced knowledge of Cybersecurity frameworks (MITRE, OWASP, CIS, NIST).
• EDR: Bitdefender, SentinelOne, Trend Micro.
• SIEM: Rapid7, Splunk, IBM QRadar.
• PAM: Vaultone, BeyondTrust, CyberArk, Senha Segura.
• IGA: Netadmin, Okta, Forcepoint.

Responsabilidades

• Identify vulnerabilities in systems, networks and apps.
• Implement proactive security measures (firewalls, antivirus, IDS).
• Monitor network to detect suspicious activity.
• Develop incident response plans and containment actions.
• Manage security policies and educate staff.
• Train employees on security best practices.
• Handle access control and offboarding tickets.
• Perform risk assessments.
• Implement data encryption and access controls.
• Support LGPD compliance with legal team.
• Continuously improve security measures.

Conhecimentos

vulnerability identification

threat prevention

incident response

risk assessment

data security

network security

cloud security

host protection

encryption

security frameworks

Formação académica

Degree in Computer Networks

Degree in Computer Engineering

Information Security certification

Cyber Security certification

ISO 27000

Security+

Ferramentas

Bitdefender (EDR)

SentinelOne (EDR)

Trend Micro (EDR)

Rapid7 (SIEM)

Splunk (SIEM)

IBM QRadar (SIEM)

Vaultone (PAM)

BeyondTrust (PAM)

CyberArk (PAM)

Senha Segura (PAM)

Netadmin (IGA)

Okta (IGA)

Forcepoint (IGA)

Descrição da oferta de emprego

Responsibilities

• Vulnerability identification: Analyze systems, networks and applications to identify vulnerabilities that could be exploited by attackers;
• Threat prevention: Implement proactive security measures such as firewalls, antivirus, intrusion detection systems and security policies to prevent security threats;
• Threat monitoring: Continuously monitor the network and systems to detect suspicious activity that may indicate an ongoing security breach;
• Incident response: Develop incident response plans and act quickly to contain, investigate and remediate security incidents when they occur;
• Security policy management: Develop and implement security policies, guide employees on best practices and promote a security‑aware culture;
• Training and awareness: Educate employees about security threats and the importance of secure technology practices;
• Ticket management: Handle access control and termination/offboarding tickets, meeting the SLA and aging metrics established by the department;
• Risk assessment: Perform risk assessments to identify and prioritize potential threats to the company’s information security;
• Data security: Implement encryption, access controls and other measures to protect confidential data;
• Regulatory compliance: Support the legal team with matters related to LGPD (Brazilian General Data Protection Law);
• Continuous improvement: Stay current with security trends, emerging threats and new technologies, continuously adjusting the company’s security measures.

Requirements

• Degree in Computer Networks or Computer Engineering;
• Certifications in Information Security / Cyber Security;
• ISO 27000 and/or Security+ certification (desired);
• Strong theoretical knowledge of network, host, database and cloud security;
• Strong knowledge of SIEM solutions;
• Experience with Microsoft 365 Defender;
• Practical experience with Windows and Linux operating systems;
• Knowledge of perimeter tools such as firewalls, EDR, DLP, WAF, IDS and IPS;
• Knowledge of host protection tools;
• Advanced knowledge of Cybersecurity and frameworks such as MITRE, OWASP, CIS, NIST series, among others;
• EDR: Bitdefender, SentinelOne, Trend Micro;
• SIEM: Rapid7, Splunk, IBM QRadar;
• PAM: Vaultone, BeyondTrust, CyberArk, Senha Segura;
• IGA: Netadmin, Okta, Forcepoint.

Hard Skills

• vulnerability identification
• threat prevention
• incident response
• risk assessment
• data security
• network security
• cloud security
• host protection
• encryption
• security frameworks

Soft Skills

• training and awareness
• communication
• problem‐solving
• team collaboration
• proactive mindset

Certifications & Qualifications

• degree in Computer Networks
• degree in Computer Engineering
• Information Security certification
• Cyber Security certification
• ISO 27000
• Security+