Information Security Analyst - Mid-Level (SecOps)

Description

***Who are we?*** Bellinati Perez*,* specializes in debt recovery—both secured and unsecured—through amicable and judicial means, employing human, digital, and hybrid negotiation models. With over 25 years of experience and tradition, our efficiency and reputation enable us to partner with the largest credit originators in Brazil. We are recognized as one of the top 20 best companies to work for in the state of Paraná and among the best in Brazil by GPTW (Great Place To Work). In addition, we foster a diverse, inclusive environment that values competence, professionalism, and innovation. ***Cultural Fit*** **Innovation**: Innovation is part of our DNA—we continuously seek new technologies to enhance experiences for both our clients and employees. **Diversity**: We value diversity. Here, everyone can shine as their authentic self! **Development**: You shape your own career here. Seize opportunities along your journey and grow alongside us! **Team Play**: When we exchange ideas and solutions, there’s no limit to where we can go! **Flexibility**: We adapt, enjoy ourselves, and always find the best path—within a flexible work schedule. **Responsibilities and Duties:** ***Your daily routine on the BP team as a Mid-Level Information Security Analyst?*** **Security Operations:** * Monitor and operate security tools such as SIEM, SOAR, UEBA, XDR, NGFW, EDR, DLP, CASB, and SSPM; * Perform threat hunting, event investigation, and preliminary forensic analysis; * Create and maintain incident response playbooks; * Analyze and remediate vulnerabilities end\-to\-end (detection → prioritization → remediation); * Identify security gaps and implement technical controls; * Respond to critical incidents (containment, eradication, and lessons learned). **System Hardening and Control Administration:** * Perform hardening of Windows/AD and Linux systems; * Configure rules, policies, and alerts on NGFW, WAF, email security, proxies, and DLP; * Continuously assess control effectiveness and propose improvements. **Automation and Operational Efficiency:** * Develop automations in Python, PowerShell, or Bash to reduce operational effort; * Integrate tools via APIs to improve investigation and response workflows. **Collaboration with Internal Teams:** * Support infrastructure, networking, and development teams on security topics; * Guide junior analysts and assist in improving operational processes. Requirements and Qualifications: ***What do you need to join us?*** * Bachelor’s degree in Technology fields such as Information Security, Computer Science, Information Systems, or related disciplines; * Practical experience in offensive/defensive security or security operations; **Proficiency in:** * Advanced SIEM; * XDR/EDR; * Investigation and threat hunting; * Vulnerability management (Nessus/Qualys/OpenVAS); * Windows/Linux hardening; * NGFW, WAF, proxies, and email security solutions. **Soft Skills:** * High-level critical thinking; * Resilience when operating in crisis scenarios; * Clear and concise technical communication; * Attention to detail; * Collaboration and teamwork. ***What boosts your chances?*** * Postgraduate degree or MBA in Information Security, Risk Management, or related fields; * Certifications: GCIH, GCIA, GMON, SC\-200, SC\-300, CCSP, AWS Security Specialty; * Experience with customized SOAR platforms; * Intermediate knowledge of digital forensics; * Hands-on experience with containers/Kubernetes; * Intermediate experience with SAST/DAST and DevSecOps practices. **Additional Information:** ***Work Schedule:*** * 8 hours and 48 minutes per day; * Monday to Friday, from 8:00 AM to 5:48 PM\. ***Work Model/Location:*** * Hybrid \| Downtown \- Curitiba / PR **\#JoinBP (:** Employment Type: Full-time, CLT permanent contract Benefits: * Dental insurance * Commercial partnerships and discounts * Life insurance * Meal allowance * Transportation allowance Selection Question(s): * What is your salary expectation? (PJ) * Are you available and interested in working under a PJ contract? Work Location: On-site