Senior Cybersecurity Analyst (Infrastructure Security)

Azion; Porto Alegre; Presencial; BRL 80.000 - 120.000; Tempo integral

Resumo da oferta

A technology company based in Porto Alegre, Brazil is seeking a Senior Cybersecurity Analyst to enhance infrastructure security. The role involves managing a vulnerability management program, conducting penetration tests, and ensuring compliance within cloud and on-prem environments. Candidates should have strong knowledge of Linux and cloud security, along with experience using key vulnerability tools. This position offers competitive benefits and a flexible working model, making it ideal for innovative professionals looking to thrive in a high-performance team.

Serviços

Health and dental plan

Flexible working hours

Annual international exchange program

Transport voucher without payroll deduction

Stock options

Qualificações

• Strong command of Linux and cloud security practices.
• Experience in common security frameworks and vulnerability assessment.
• Proficiency in developing scripts for automation.

Responsabilidades

• Manage and operate the vulnerability management program.
• Design and implement server security solutions.
• Execute compliance scans and support secure engineering.

Conhecimentos

Linux security

Cloud security (GCP, AWS)

Communication skills

Vulnerability management

Penetration testing

Python scripting

Ferramentas

Tenable One

Rapid 7

Nessus

Descrição da oferta de emprego

About Azion

At Azion you will have the opportunity to develop and be connected to cutting-edge technology, immersed in a culture centered on innovation and a high-performance team, unlocking new possibilities and working with the future of technology.

About the position

We are seeking a Senior Cybersecurity Analyst to drive our infrastructure and server security initiatives.

This engineer will manage our vulnerability management program, perform penetration testing, and maintain the security posture of our cloud and on-prem environments.

This is a hands-on role requiring scripting and automation capabilities.

Main challenges

• Operate the vulnerability management program.
• Design and implement server security solutions (Linux environment).
• Design server configuration and hardening, and collaborate with the SRE and Infrastructure teams to deploy and maintain both.
• Collaborate with SRE to secure infrastructure and server environments across the organization.
• Develop scripts and automations to support the work.
• Execute infrastructure scans to support current and future compliances (e.g. ASV scan for PCI DSS 4.0).
• Support internal engineering teams with secure-by-design practices.
• Collaborate with the threat intelligence and compliance teams.

Requirements :

• Strong knowledge of Linux and cloud security (GCP, AWS, on-prem containers).
• Experience of common security frameworks and CVSS / CVE / CWE projects.
• Knowledge of vulnerability and scanning tools, such as Tenable One, Rapid 7, Nessus.
• Experience conducting penetration tests in infrastructure and server environments.
• Knowledge of OWASP, Mitre Att&ck, and other foundational security projects.
• Collaborative and organized, with strong communication skills.
• Intermediate / Advanced English proficiency.

Differentials :

• Proficient in Python and shell scripting.
• Knowledge of PCI DSS 4.0 and SOC 2 frameworks.
• Experience working with end-user environments.
• Experience with software development for Linux.
• MacOS experience.
• Fluent English proficiency.

Benefits & Azion Way of Life

• CLT hiring model;
• Health and dental plan;
• Flexible VR and VA (Flash Card), including during vacation periods;
• Transport voucher without payroll deduction;
• Annual internal hackathons;
• Mobility allowance (additional amount for travel);
• Freestyle (incentive to customize the workstation);
• Platform for language courses (English and Spanish);
• Stock options (according to policy);
• Birthday day off;
• TotalPass;
• Flexible working hours (really flexible);
• Nomad program to work from anywhere for up to 3 months a year;
• Annual international exchange program.

FlexWork Model

We offer a FlexWork model that prioritizes acculturation and collaboration.

For the first three months, you will work on-site in the local office, an essential step in building solid relationships and a genuine connection with our values and culture.

We believe that this initial immersion not only strengthens the team, but also boosts creativity and innovation.

Come and join our team!

We look forward to getting to know you and walking a path of success in technology together!