Senior Project Security Analyst

Jobtailor; São Paulo; Presencial; BRL 180 000 - 240 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a senior security architect to lead information security and systems architecture across on-prem, cloud, and hybrid environments. You will drive secure development, risk analysis and security-by-design practices while collaborating with architecture, development and security teams.

The role requires experience in vulnerability management, APIs/microservices security, IAM, and standard frameworks (OWASP, NIST, ISO 27001, CIS). Certifications in AWS/Azure/CCSP are desirable.

Qualificações

• Bachelor's degree in IT or related fields.
• Experience in systems architecture and information security.
• Knowledge of on-premises, cloud (AWS, Azure or GCP) and hybrid architectures.
• Experience in solution assessments, secure development and risk analysis.
• Knowledge of APIs, microservices, IAM, networking and security controls.
• Experience with vulnerability analysis and resolution of technical issues.
• Team player with strong interpersonal skills, communication and technical influence.
• Knowledge of OWASP, NIST, ISO 27001 and CIS Benchmarks is desirable.
• Experience with DevSecOps, containers and Kubernetes is desirable.
• Certifications such as AWS, Azure, Security+, CCSK, CCSP or similar are desirable.

Responsabilidades

• Lead security initiatives from conception through deployment, ensuring schedule, cost and quality.
• Work closely with architecture, development, infrastructure and security teams to build secure solutions.
• Assess on-premises, cloud and hybrid architectures, identifying risks and opportunities for improvement.
• Conduct security reviews of systems, applications, APIs and integrations.
• Participate in defining architecture and secure development standards (Security by Design).
• Evaluate new technological solutions and support technical decision-making.
• Support identification and remediation of vulnerabilities in applications and environments.
• Prepare documentation, diagrams and technical recommendations.
• Investigate complex issues and propose efficient, secure solutions.
• Promote cross-functional collaboration and disseminate security best practices.

Conhecimentos

Information Security Leadership

Systems Architecture Expertise

Cloud Architecture Knowledge (AWS, …)

Vulnerability Analysis and Remediation

DevSecOps and Containerization

Formação académica

Bachelor's degree in IT or related fields

Ferramentas

Kubernetes

Containers

AWS

Azure

GCP

Descrição da oferta de emprego

• Lead business initiatives focused on information security, from conception through deployment, ensuring schedule, cost and quality;
• Work closely with architecture, development, infrastructure and security teams to build secure solutions;
• Assess on-premises, cloud and hybrid architectures, identifying risks and opportunities for improvement;
• Conduct security reviews of systems, applications, APIs and integrations;
• Participate in defining architecture and secure development standards (Security by Design);
• Evaluate new technological solutions and support technical decision-making;
• Support identification and remediation of vulnerabilities in applications and environments;
• Prepare documentation, diagrams and technical recommendations;
• Investigate complex issues and propose efficient, secure solutions;
• Promote cross-functional collaboration and disseminate security best practices.

Requirements

• Bachelor's degree in IT or related fields;
• Experience in systems architecture and information security;
• Knowledge of on-premises, cloud (AWS, Azure or GCP) and hybrid architectures;
• Experience in solution assessments, secure development and risk analysis;
• Knowledge of APIs, microservices, IAM, networking and security controls;
• Experience with vulnerability analysis and resolution of technical issues;
• Team player with strong interpersonal skills, communication and technical influence;
• Knowledge of OWASP, NIST, ISO 27001 and CIS Benchmarks is desirable;
• Experience with DevSecOps, containers and Kubernetes is desirable;
• Certifications such as AWS, Azure, Security+, CCSK, CCSP or similar are desirable.

Core Competencies

Demonstrates expertise in information security and systems architecture, with a strong focus on secure development practices and risk analysis. Proficient in evaluating cloud and hybrid architectures, vulnerability management, and promoting security best practices across teams.

Highest-signal resume keywords

• Information Security Leadership
• Systems Architecture Expertise
• Cloud Architecture Knowledge (AWS, Azure, GCP)
• Vulnerability Analysis and Remediation
• DevSecOps and Containerization Experience

ATS Optimization Keywords

Hard Skills

• Information Security
• Systems Architecture
• Risk Analysis
• Secure Development
• Vulnerability Management
• API Knowledge
• Microservices
• Networking
• Security Controls
• Technical Documentation

Soft Skills

• Interpersonal Skills
• Communication
• Technical Influence
• Team Collaboration

Certifications & Qualifications

• AWS Certification
• Azure Certification
• Security+
• CCSK
• CCSP

Industry Keywords

• OWASP
• NIST
• ISO 27001
• CIS Benchmarks
• Security by Design

Tools & Technologies

• AWS
• Azure
• GCP
• Kubernetes
• Containers