Junior Information Security Analyst (Recife)

Description

Job Summary: A professional responsible for protecting digital environments, monitoring threats, and responding to incidents, contributing to the security of client assets and the evolution of the SOC. Key Highlights: 1. Protection of digital environments 2. Monitoring, incident response, and threat intelligence 3. Collaboration with multidisciplinary teams **Junior Information Security Analyst (Hybrid \- Recife)** At EY, we are committed to shaping your future with confidence. We will help you succeed in a globally connected environment filled with diverse teams and take your career wherever you want it to go. Join EY and help us build a better world of business. **About the opportunity:** You will join a dedicated team focused on protecting digital environments, performing monitoring, incident response, and threat intelligence. Your role will be critical in ensuring the security of our clients’ assets, collaborating with multidisciplinary teams, and contributing to the evolution of SOC processes and tools. If you seek growth, continuous learning, and real impact in the field of cybersecurity, this role is for you! **Your responsibilities will include:** Receiving and registering tickets from the SIEM into the ITSM system, ensuring proper incident tracking. Performing daily checklists to validate the health and functionality of security assets. Monitoring and reviewing alerts and requests received via ITSM to enable agile and effective responses. Developing, updating, and maintaining threat intelligence feeds to support SOC operations. Sending immediate notifications for critical alerts—such as zero-day vulnerabilities—to responsible teams. Conducting searches and investigations using dark web and deep web tools for threat intelligence (CTI) collection. Supporting threat hunting activities within the client’s environment, contributing to proactive threat identification. Performing sanitization of client tools and applying filters to reduce false positives in alerts. Providing initial incident response, including preliminary analysis, classification, containment, and escalation per internal playbooks. Collaborating with internal multidisciplinary teams, documenting all relevant information in tickets to ensure traceability and auditability. Participating in ongoing technical training and updates to enhance knowledge and skills in cybersecurity. Contributing to continuous improvement of SOC processes and tools by proposing solutions and adjustments based on analysis and practical experience. Supporting and developing day-to-day documents that assist in alert handling (playbooks). **Required qualifications and skills:** * Bachelor’s degree in Information Technology or related fields. * Knowledge of SIEM (Microsoft Sentinel, QRadar, Splunk, Stellar Cyber). * Experience with Endpoint Detection and Response (Microsoft Defender, CrowdStrike, Trend Micro, Sophos). * Knowledge of Network IDS/IPS/Firewall (FortiGate, Palo Alto, Check Point). * Experience with Windows/Active Directory and Linux operating systems (CentOS, SLES, Red Hat). * Knowledge of Data Loss Prevention (DLP Purview) tools. Visit go.ey.com/beneficios to explore our universe of **benefits**. **What we offer:** At EY, you’ll develop future-focused skills and gain world-class experiences. We’ll empower you in a flexible environment and amplify your extraordinary talents within a diverse and inclusive culture, supported by globally connected teams. For the fourth consecutive year, EY has been named one of the Great Place to Work’s best companies to work for, with special recognition in diversity categories. You can join our programs and groups—which, alongside numerous internal initiatives—support our ongoing pursuit of equity. Would you like to shape your future with confidence? Apply today! To help create the best possible recruitment experience, please describe any accessibility needs you may have. Learn more about working at EY: EY Careers LinkedIn @EY Instagram @eybrasilcarreiras \#InformationSecurity \#SOC \#BlueTeam \#Monitoring \#SecurityTeam \#CSIRT \#GVUL \#Cybersecurity \#TechEY \#Recife \#EYCareers