Senior Vulnerability Analyst

Description

Job Summary: Hands-on professional for vulnerability remediation and hardening, with experience in infrastructure and SOC incident handling. Key Highlights: 1. Incident ticket handling and vulnerability management. 2. Experience in SOC and infrastructure, focusing on hardening and patching. 3. Knowledge of Windows servers, GPO, VMware, and Red Hat Linux. Nice to meet you — We are Evertec! Evertec is a technology company specializing in financial services, with over 27 years of operation and presence in 26 countries across Latin America and the Caribbean. Processing over 11 billion transactions annually, we are a reference in digital transformation solutions for the financial market. We offer a comprehensive portfolio of software solutions serving financial institutions, enterprises, and fintechs seeking innovation, security, and efficiency. Our commitment is to technological excellence, financial inclusion, and sustainable value creation for customers, employees, and partners — fostering a more connected and accessible ecosystem. Requirements: Hybrid work model \- 1 day per week \- Morumbi region Strong infrastructure knowledge, plus hands-on SOC experience. The ideal candidate is hands-on for vulnerability remediation and hardening, while also possessing infrastructure background. * SOC incident ticket handling. * Registering and categorizing incidents. * Managing queues and tasks assigned to the vulnerability management team. * Identifying vulnerabilities (patching), analyzing, resolving, and mapping risks inherent to IT services. * Understanding how to exploit and remediate application vulnerabilities. * Security baseline management (hardening). * Analyzing vulnerability and intrusion test results, developing remediation strategies, and collaborating with other cybersecurity teams for issue resolution and understanding — supporting the development of action plans. Experience handling vulnerabilities on servers and middleware applications is desirable. Solid experience with Windows servers, GPO, VMware, and Red Hat Linux is mandatory. Knowledge of security protocols such as SSL/TLS, IPSec, and SSH. Knowledge of operating systems, networks, and databases