Information Security Analyst – Senior

Jobtailor; Barueri; Presencial; BRL 180 000 - 320 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a seasoned cybersecurity consultant to deliver security assurances across projects and client engagements. The role involves assessing risk, testing applications, and working with sales and delivery teams to ensure secure deliverables.

Ideal candidates bring 7+ years in cybersecurity consulting, strong experience in Web/Mobile pen tests, and expertise in standards such as PCI-DSS, ISO 27001 and NIST. You will influence product strategy and client security postures.

Qualificações

• More than 7 years of experience in cybersecurity consulting services, with proven work in corporate environments and/or specialized consultancies.
• Strong experience in conducting penetration tests (Web and Mobile).
• Strong knowledge of DevSecOps pipelines.
• Strong knowledge of SAST and DAST.
• Experience in vulnerability management.
• Strong knowledge and application of information security standards and best practices such as PCI-DSS, HIPAA, ISO 27001, NIST, CIS, CSA, among others.
• Practical experience conducting cyber risk assessments, security control evaluations and compliance audits.
• Experience building and evaluating cybersecurity programs, aligning effective protection with business objectives.
• Advanced analytical and quantitative abilities, focused on data‑driven solutions and insights applicable to the client’s context.
• Continual awareness of cybersecurity trends and innovations, with market insight and ability to identify opportunities.
• Ability to operate in dynamic environments with organization, adaptability and management of multiple simultaneous priorities.
• Proficiency in data analysis, with the ability to transform raw information (e.g., threat intelligence) into actionable insights.
• Excellent verbal and written communication skills, with the ability to translate technical data into clear, impactful narratives for diverse audiences.

Responsabilidades

• Support the delivery of cybersecurity projects and solutions by assessing risk exposure and proposing continuous improvements.
• Work collaboratively within a team, fostering a positive environment and delivering high‑quality outcomes.
• Work with internal stakeholders (sales, accounts and business development) to ensure security in deliverables.
• Ensure security in the delivery of services, projects and cybersecurity solutions.
• Identify and mitigate risks throughout initiative execution.
• Test applications to assess security.
• Contribute to the evolution of our products by supporting global, regional and local strategies.
• Establish relationships with clients and internal stakeholders as a cybersecurity specialist.

Conhecimentos

Cybersecurity consulting

Penetration testing (Web/Mobile)

DevSecOps pipelines

SAST

DAST

Vulnerability management

Security standards (PCI-DSS, HIPAA,ISO

Cyber risk assessments

Security program building

Data analysis

Communication skills

Adaptability

Descrição da oferta de emprego

Responsibilities

• Support the delivery of cybersecurity projects and solutions by assessing risk exposure and proposing continuous improvements.
• Work collaboratively within a team, fostering a positive environment and delivering high‑quality outcomes.
• Work with internal stakeholders (sales, accounts and business development) to ensure security in deliverables.
• Ensure security in the delivery of services, projects and cybersecurity solutions.
• Identify and mitigate risks throughout initiative execution.
• Test applications to assess security.
• Contribute to the evolution of our products by supporting global, regional and local strategies.
• Establish relationships with clients and internal stakeholders as a cybersecurity specialist.

Requirements

• More than 7 years of experience in cybersecurity consulting services, with proven work in corporate environments and/or specialized consultancies.
• Strong experience in conducting penetration tests (Web and Mobile).
• Strong knowledge of DevSecOps pipelines.
• Strong knowledge of SAST and DAST.
• Experience in vulnerability management.
• Strong knowledge and application of information security standards and best practices such as PCI‑DSS, HIPAA, ISO 27001, NIST, CIS, CSA, among others.
• Practical experience conducting cyber risk assessments, security control evaluations and compliance audits.
• Experience building and evaluating cybersecurity programs, aligning effective protection with business objectives.
• Advanced analytical and quantitative abilities, focused on data‑driven solutions and insights applicable to the client’s context.
• Continual awareness of cybersecurity trends and innovations, with market insight and ability to identify opportunities.
• Ability to operate in dynamic environments with organization, adaptability and management of multiple simultaneous priorities.
• Proficiency in data analysis, with the ability to transform raw information (e.g., threat intelligence) into actionable insights.
• Excellent verbal and written communication skills, with the ability to translate technical data into clear, impactful narratives for diverse audiences.