Senior Information Security Analyst

Description

Job Summary: Serve as a technical reference in Information Security, ensuring protection of the technological environment and compliance with regulatory requirements, while contributing to the team's technical maturity. Key Highlights: 1. Technical reference in Information Security 2. Focus on protecting the technological environment and ensuring compliance 3. Contribution to the team's technical maturity **Job Description:** ---------------------- We value diversity and believe that different stories and perspectives strengthen our team. We encourage applications from people with disabilities (PCDs) and continuously strive to foster an inclusive, respectful, and equitable environment for everyone. Job Mission: Serve as a technical reference in Information Security, ensuring protection of the technological environment through implementation, evolution, and maintenance of security controls, incident response, and strengthening of cybersecurity processes. Responsible for supporting the security strategy within a regulated financial environment, ensuring compliance with Central Bank of Brazil (BACEN) requirements, audits, and industry best practices, while contributing to the team's technical maturity. Key Responsibilities: Serve as the technical reference for the Blue Team, supporting monitoring, analysis, triage of security alerts, and incident response; Administer and evolve security controls related to network infrastructure, including firewalls, switches, VPNs, and other critical components; Implement, administer, and enhance security tools such as SIEM, IDS/IPS, EDR, and monitoring solutions; Perform network traffic analysis, event investigation, and identification of suspicious or anomalous behavior; Conduct advanced troubleshooting of network environments (TCP/IP, MPLS, VPN, routing, and switching), supporting technical teams in problem resolution; Lead technical analyses and post-incident investigations, including evidence collection and forensic analysis; Ensure adherence to cybersecurity regulatory requirements applicable to the financial sector, including BACEN resolutions; Support internal and external Technology and Information Security audits by preparing evidence, tracking action plans, and continuously improving controls; Develop, review, and maintain internal security policies, procedures, and controls; Manage multidisciplinary security projects, coordinating demands across Technology, Infrastructure, Compliance, Risk, and business areas; Share technical knowledge and support the professional development of team members. **Essential Requirements:** ------------------------------ Solid experience in Information Technology, with a minimum of 10 years in the field, including at least 5 years focused on Information Security; Practical experience in cybersecurity environments, preferably in Blue Team/SOC operations; Advanced knowledge of firewall administration and management (Fortinet, Palo Alto, Check Point, or similar technologies); Strong experience in corporate networks: TCP/IP, MPLS, VPN, routing, and switching; Experience in monitoring, investigating, and handling security incidents; Knowledge of BACEN regulations related to cybersecurity, especially Resolution CMN No. 4\.893/2021; Experience in internal and external IT and Information Security audit processes; Experience managing technical projects involving multiple areas and stakeholders; Knowledge of Windows Server, Linux, and virtualization environments (VMware or similar); Ability to organize, work autonomously, communicate clearly, and act consultatively; Bachelor’s degree in Information Security, Networking, Information Technology, or related fields; specialization/MBA is a plus. Technical English for reading and interpreting documentation, standards, and reports. **Desirable Requirements:** -------------------------- Experience with LGPD, ISO 27001, and implementation of security controls in regulated environments; Knowledge of Cloud Security (Azure, AWS, or GCP); Certifications in Information Security (e.g., CISSP, CISM, CompTIA Security\+, CEH, Fortinet, among others); Familiarity with MITRE ATT\&CK and NIST Cybersecurity Framework; Experience with Identity and Access Management (Active Directory, LDAP, IAM). **Employment Type:** -------------------------- CLT **PCD:** -------- YES **Benefits:** --------------- Transportation Voucher Health Insurance Senff Saúde Flexible Voucher Life Insurance Payroll Deducted Loan Meal Voucher Dental Plan Childcare Assistance **Work Location:** ---------------------- Av. Senador Souza Naves, 1240, Cristo Rei Neighborhood \- Curitiba (PR) **Working Hours:** ------------------------ Monday to Friday, from 08:00 to 17:00