Senior Cybersecurity Analyst – Blue Team, Data Security

Jobtailor; Brasil; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Jobtailor seeks a data security professional to implement and manage DLP solutions, policy tuning, and governance across cloud and on‑prem environments. You will lead data classification, asset mapping, and incident response planning to protect sensitive information.

Responsibilities include configuring DLP controls, mapping data flows, and ensuring LGPD, GDPR, and related standards compliance while coordinating with security teams to mitigate risks and false positives.

Qualificações

• Postgraduate studies in progress
• Bachelor's degree completed in Information Security, Information Technology, or related fields
• Strong knowledge and proficiency in IT Infrastructure and Networks
• Experience administering DLP tools
• Experience in cybersecurity disciplines, with emphasis on data security
• Understanding of database management systems and their implications for data security
• Familiarity with data protection regulations and standards, such as LGPD, GDPR, HIPAA, CCPA, among others, depending on region and sector

Responsabilidades

• Implement, configure, and manage DLP solutions to protect data in transit and at rest
• Create, test, and maintain DLP policies and rules, performing continuous tuning to reduce false positives and ensure control effectiveness
• Lead the data classification and labeling strategy, ensuring correct identification and handling of information according to its criticality level
• Perform data mapping and inventory of information assets, identifying where sensitive data is created, stored, processed, and transmitted
• Support the development and evolution of a data governance framework, defining roles, responsibilities, and processes for the information lifecycle
• Collaborate on the enhancement of CASB, SWG, and data security controls in cloud environments, ensuring visibility and protection of data on SaaS and IaaS platforms
• Develop and test, together with the Incident Response team, response plans specific to data breaches and leaks, including detection, containment, notification to authorities (ANPD), and communication to data subjects
• Monitor and investigate data protection policy violation alerts, conducting triage, root cause analysis, and corrective actions
• Create and maintain metrics to measure the effectiveness of implemented data security controls

Descrição da oferta de emprego

Responsibilities

• Implement, configure, and manage DLP solutions to protect data in transit and at rest
• Create, test, and maintain DLP policies and rules, performing continuous tuning to reduce false positives and ensure control effectiveness
• Lead the data classification and labeling strategy, ensuring correct identification and handling of information according to its criticality level
• Perform data mapping and inventory of information assets, identifying where sensitive data is created, stored, processed, and transmitted
• Support the development and evolution of a data governance framework, defining roles, responsibilities, and processes for the information lifecycle
• Collaborate on the enhancement of CASB, SWG, and data security controls in cloud environments, ensuring visibility and protection of data on SaaS and IaaS platforms
• Develop and test, together with the Incident Response team, response plans specific to data breaches and leaks, including detection, containment, notification to authorities (ANPD), and communication to data subjects
• Monitor and investigate data protection policy violation alerts, conducting triage, root cause analysis, and corrective actions
• Create and maintain metrics to measure the effectiveness of implemented data security controls

Requirements

• Postgraduate studies in progress
• Bachelor's degree completed in Information Security, Information Technology, or related fields
• Strong knowledge and proficiency in IT Infrastructure and Networks
• Experience administering DLP tools
• Experience in cybersecurity disciplines, with emphasis on data security
• Understanding of database management systems and their implications for data security
• Familiarity with data protection regulations and standards, such as LGPD, GDPR, HIPAA, CCPA, among others, depending on region and sector