Information Security Analyst – Exposure Management (Vulnerability & Risk)

Description

If you go beyond tools and reports and view risk strategically, this opportunity is for you. We are seeking a professional with analytical vision and technical maturity to identify, correlate, and prioritize security exposures, transforming technical data into clear and business-relevant decisions. Your mission will be to strategically analyze vulnerabilities and exposures, evaluating real risks based on environmental context, supporting critical decisions, and directly contributing to the design of information security solutions, guidelines, and practices. **What you will do:** * Lead risk analyses based on technical vulnerabilities and exposures, considering context, impact, and criticality * Support clients in decision-making, going beyond tool operations and automated reporting * Correlate technical data with business impact, translating risks into clear action-oriented guidance * Contribute to designing technical solutions aimed at reducing exposure and strengthening security posture * Participate in defining and reviewing security policies, procedures, baselines, and best practices * Support decisions related to security architecture, focusing on effectiveness and feasibility * Operate in a consultative model within MSS environments, ensuring continuous support and advancement of client maturity **What we expect from you:** * Strong analytical capability to assess vulnerabilities beyond scores, considering real exploitation, context, and impact * Systemic view of risk, including side effects of mitigation actions * Clear distinction among vulnerability, exposure, and risk * Ability to define and sustain prioritization criteria based on technical and business impact * Consultative mindset, with skills to influence technical and strategic decisions * Maturity to serve as a technical reference in complex scenarios * Autonomy, organization, and accountability in executing tasks **Technical requirements:** * Solid knowledge of networks, operating systems, and corporate environment architectures * Experience with technical analysis in Linux environments (troubleshooting and exposure validation) * Ability to read, write, and interpret Python scripts for automation and data analysis * Deep understanding of the risk lifecycle and treatment strategies (mitigate, avoid, accept, transfer) **Preferred qualifications:** * Experience in context-driven vulnerability management programs with real-world prioritization * Experience in complex corporate environments with large asset volumes * Experience in developing or reviewing security policies and baselines * Familiarity with automation, APIs, and consolidation of technical data * Information security certifications (e.g., Security+ or equivalent) or equivalent experience **Work model:** * Hybrid work (Alphaville/SP)