[CROSS] Information Security Analyst

Description

##### **CLT,** **Lages** **Hybrid** "Empower the value of data to drive the sustainability of our customers". As a technology platform for management and automation, we are specialists in four business verticals. 1️⃣ Tax \- Intelligence and compliance for fiscal document governance. 2️⃣ Logistics \- Technology for transport automation and digital transformation. 3️⃣ Devices \- Monitoring and management of corporate smart devices. 4️⃣ Kubo \- Platform for corporate education and organizational knowledge management \- LMS/LXP 5️⃣ Payment Institution \- Technology for payments, financial automation, and transactional governance. Our vision is: "Lead the markets we operate in through essential solutions for our customers' success". All this is connected to ESG, because we believe environmental, social, and governance responsibility are fundamental pillars for NDD's success. Our products are present in more than 30 countries and serve approximately 20,000 customers; to make all this happen, we have 580 employees and specialists! ##### **Requirements** **What we seek for the Information Security Analyst position** We are looking for a Mid-level Information Security Analyst with a focus on SOC (Security Operations Center) to strategically and operationally strengthen the company’s monitoring, detection, and incident response capabilities. This role will involve close collaboration with the external partner responsible for N1 and N2 SOC operations, acting as the internal reference for continuous process improvement, alert tuning, playbook development, technical support to other departments, and advancing monitoring and incident response maturity. We seek an analytical, proactive, and collaborative professional who enjoys investigating problems, improving processes, and providing technical support to various teams across the company. **Key Responsibilities** Support security monitoring and incident response operations. Collaborate with the external SOC partner, performing operational alignment and technical support. Tune, review, and optimize SIEM/EDR rules, alerts, and correlations to reduce false positives and improve operational efficiency. Create, adjust, and deprecate alerts according to operational needs and risk scenarios. Support investigations of incidents and suspicious events. Guide and oversee more complex technical analyses with responsible departments. Develop and maintain playbooks and operational procedures for recurring analyses. Support standardization of triage, investigation, and response processes. Contribute to continuous improvements in operational security processes. Assist in identifying monitoring gaps and opportunities for SOC operational evolution. Participate in analysis and prioritization of critical security events. Support threat hunting and proactive analyses when required. Produce technical documentation and operational reports. **Mandatory Requirements** Prior experience in Information Security with focus on SOC, monitoring, or incident response. Knowledge of SIEM, EDR, and log analysis. Basic/intermediate knowledge of security incident investigation. Knowledge of networks, protocols, and security fundamentals. Experience creating or adjusting monitoring and alerting rules. Analytical ability and investigative mindset. Strong communication skills for interaction with technical teams and vendors. **Preferred Qualifications** Experience with tools such as Wazuh, Qualys, Kaspersky, Microsoft Defender, or similar. Familiarity with frameworks such as MITRE ATT\&CK. Experience developing playbooks and automations. Knowledge of cloud environments (Azure is a plus). Knowledge of vulnerabilities, hardening, and security best practices. Experience in outsourced or hybrid SOC operations. Scripting knowledge for automation (PowerShell, Python, or Bash). ##### **Benefits** **What we offer?** Annual Bonus: Up to 3.3 monthly salaries; for commercial roles, an OTC commission-based performance model. Career Development Plan: Feedback-oriented culture with 360° performance evaluations; internal recognition program; close management engagement via 1:1 meetings. NDD with You: Financial education program; psychological counseling; legal advice; social support. Health: Unimed health plan and life insurance; flu vaccination support and wellness initiatives. Meals: Meal allowance; unlimited coffee and fruits at the office. Well-being: Relaxation space with leisure area, barbecue grill, and games. SESC Partnership: Access to culture, education, and tourism. Education: Tuition assistance; language learning incentives; support for industry events; certification support. Transportation: Transportation allowance for commuting; dedicated parking and bicycle facilities. Birthday Voucher: To celebrate this special occasion. Work Schedule: 40-hour workweek / Flexible hours. Diversity and Inclusion \#ESG NDD is a naturally diverse company, leveraging all differences to break down barriers and foster greater innovation in how we think and act. We seek knowledge and are constantly introduced to diverse talents possessing capabilities essential to our organization. Our culture helps create a safe environment with development and growth opportunities for all individuals committed to evolving and improving their journey alongside the company.