Senior Information Security Analyst

Description

Job Summary: Work as a Senior Security-by-Design Analyst, ensuring security is embedded from the conception of systems, products, and projects, with focus on secure architecture, threat modeling, and risk assessment. Key Highlights: 1. Integrate security from the design phase of systems and products 2. Strong expertise in secure architecture and threat modeling 3. Support for multiple business areas and diverse technology domains Act as a Senior Security-by-Design Analyst, responsible for embedding security from the conception of systems, products, and projects, supporting multiple business areas and diverse technology domains, ensuring risks are identified, addressed, and documented prior to production release. This is a structural and ongoing role, with strong emphasis on secure architecture, threat modeling, and risk assessment. **Responsibilities and Duties** 1\. Security by Design / Shift Left * Define security requirements for new systems, products, and strategic initiatives * Engage from the conception and technical design phases, avoiding reactive approaches * Ensure alignment with internal policies, industry best practices, and regulatory requirements 2\. Secure Architecture Support * Evaluate and advise on architectural designs (applications, APIs, cloud, integrations) * Collaborate closely with architecture, product, engineering, and AppSec teams * Propose secure, reusable architectural standards 3\. Threat Modeling * Conduct and support Threat Modeling using STRIDE * Ensure threat modeling is: * documented * updated according to changes * consistently applied across squads * Support AppSec and Engineering teams in mitigating identified threats 4\. Risk Assessment * Assess risks related to: * new products * new technologies * significant changes (GMUDs, integrations, cloud) * Support risk decisions, exceptions, and remediation plans * Produce clear inputs for audits and regulatory bodies 5\. Cross-Squad Engagement * Serve as the Security-by-Design focal point for multiple squads * Balance competing demands, prioritizing critical risks * Participate in relevant project forums, committees, and ceremonies. **Requirements and Qualifications** Solid hands-on experience in Information Security applied to projects and products Proven experience in: * Secure Architecture * Threat Modeling (STRIDE) * Security Risk Assessment Knowledge of environments including: * modern applications (APIs, microservices) * cloud Ability to communicate effectively with both technical and non-technical audiences Experience in regulated and mission-critical environments (financial sector is a plus) **Additional Information** Bank benefits, standard business hours, workplace location: Alphaville Digio is more than a digital bank. We are a bantech: combining the stability of a bank with the agility of a fintech. We are passionate about technology and leverage it to transform our customers’ financial lives—securely and transparently. **\+ Efficiency** * **Bureaucracy** Daily, we build digital solutions to simplify how Brazilians manage their money. We strive to make Digio everything our customers need—in one place: the DigioApp. With simplicity, efficiency, zero bureaucracy, and access anytime, anywhere. **\+ Transformation** * **Comfort Zone** At Digio, we foster a collaborative culture, offer careers built on continuous learning and growth, and cultivate ownership and pride in delivering excellence. People are our most important asset—and without them, Digio would not have come this far. For all these reasons, we bet on innovation as the driving force behind each extraordinary person on this team. We achieve more because we achieve it together. **And when we build together, everything transforms.**