Senior Security Analyst

Jobtailor; São Paulo; Presencial; BRL 120 000 - 240 000; Tempo integral

Resumo da oferta

Jobtailor in São Paulo seeks a security professional to lead vulnerability assessments, risk analyses, and threat modeling across enterprise systems. You will drive secure development practices and collaborate with engineering teams to embed security into SDLC.

Responsibilities include managing SAST/DAST and dependency analysis tools, integrating SIEM events, and enforcing authentication, authorization, and identity protection. Prior experience in complex corporate environments is required.

Qualificações

• Knowledge of OWASP, STRIDE, and MITRE ATT&CK.
• Experience with OAuth2, OpenID Connect (OIDC), SAML, and access control models such as RBAC and ABAC.
• Experience with security pipelines, static analysis (SAST), dynamic analysis (DAST), and dependency analysis.
• Knowledge of TLS and application security fundamentals.
• Experience in complex corporate environments and integration with engineering teams.
• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related fields.

Responsabilidades

• Conduct vulnerability assessments, risk analyses, and threat modeling.
• Implement and evolve Application Security and Secure Development practices.
• Support technical teams in adopting secure development standards.
• Manage and oversee static analysis, dynamic analysis, and dependency analysis tools.
• Work on the integration of events and monitoring with SIEM.
• Ensure best practices for authentication, authorization, and identity protection.
• Support Zero Trust Architecture initiatives and security in modern environments.

Conhecimentos

OWASP

STRIDE

MITRE ATT&CK

OAuth2

OIDC

SAML

RBAC

ABAC

TLS

Secure SDLC

Formação académica

Bachelor's degree in Computer Science, Software Engineering, Information Systems, or related fields

Ferramentas

SAST

DAST

Dependency analysis tools

SIEM

Descrição da oferta de emprego

• Conduct vulnerability assessments, risk analyses, and threat modeling.
• Implement and evolve Application Security and Secure Development practices.
• Support technical teams in adopting secure development standards.
• Manage and oversee static analysis, dynamic analysis, and dependency analysis tools.
• Work on the integration of events and monitoring with SIEM.
• Ensure best practices for authentication, authorization, and identity protection.
• Support Zero Trust Architecture initiatives and security in modern environments.

Requirements

• Knowledge of OWASP, STRIDE, and MITRE ATT&CK.
• Experience with OAuth2, OpenID Connect (OIDC), SAML, and access control models such as RBAC and ABAC.
• Experience with security pipelines, static analysis (SAST), dynamic analysis (DAST), and dependency analysis.
• Knowledge of TLS and application security fundamentals.
• Experience in complex corporate environments and integration with engineering teams.
• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related fields.