Senior Information Security Analyst

Description

Job Summary: Work on identifying, analyzing, and responding to security incidents; managing vulnerabilities and compliance; and continuously enhancing cybersecurity. Key Highlights: 1. Security Monitoring and Analysis 2. Vulnerability Management and Incident Response 3. Continuous Improvement in Cybersecurity **Responsibilities and Duties:** * **Security Monitoring and Analysis:** Identify, analyze, and respond to security incidents using SIEM tools, corporate antivirus, firewalls, IDS/IPS, and other related technologies. * **Vulnerability Management:** Conduct vulnerability scans, analyze results, and support responsible teams in remediation and risk mitigation. * **Incident Investigation:** Perform detailed security incident analyses, propose corrective actions, and prepare technical and managerial reports. * **Access and Identity Management:** Support administration of privileges and access controls, ensuring adherence to the principle of least privilege and internal policy compliance. * **Compliance and Governance:** Ensure security practices align with internal policies, regulations, and frameworks (e.g., ISO 27001, NIST, LGPD). * **Continuous Improvement:** Propose enhancements to security processes and controls, tracking emerging trends and new threats in the cybersecurity landscape. * **Security Project Support:** Collaborate with internal and external teams to implement security solutions and controls within technology projects. **Essential Qualifications and Skills:** * Bachelor’s degree in **Information Technology, Information Security, Systems Engineering, or related fields**, completed or in progress. * Knowledge of **operating systems (Windows/Linux)** and **networks and protocols**. * Experience with **security tools** (e.g., corporate antivirus, SIEM, vulnerability scanners). * Knowledge of **vulnerability management** and **incident response**. * Familiarity with **security frameworks and standards**, such as **NIST, ISO 27001, CIS Controls**. * Strong analytical ability, attention to detail, and effective written and verbal communication skills. * Ongoing awareness of **emerging threats and cybersecurity trends**. **Preferred Qualifications (Will Be Valued):** * Information security certifications (e.g., **CompTIA Security\+, ISO 27001 Foundation, Fortinet NSE, AWS Security**, etc.). * Experience with **vulnerability analysis tools** (e.g., Nessus, Qualys, Nexpose). * Knowledge of **agile methodologies**. * Experience in **MSSP or SOC environments**. **Important:** ➡️ At the time of application, **please indicate whether you hold any information security certifications and specify which ones**. 12H ON / 36H OFF SHIFT