Information Security Specialist

Description

Job Summary: BS2 is seeking an Information Security professional to handle security incident response, security event monitoring, and web application protection within a career-growth-oriented environment. Key Highlights: 1. Security incident response 2. Career-growth-oriented environment 3. Addressing challenges in the financial market **About BS2** We are a 100% digital bank focused exclusively on businesses, offering personalized, human-centered service and tailored solutions—because no business is identical to another. This philosophy extends to our culture: we possess an innovative DNA that continuously inspires our entire team to reinvent itself. Here, our employees (the "bessers") enjoy an environment that fosters career growth and provides opportunities to tackle financial market challenges alongside true subject-matter experts. **Responsibilities and Duties:** * Conduct security incident response—from identification through containment, eradication, recovery, and lessons learned. * Monitor, analyze, and correlate security events using SIEM platforms. * Operate and maintain XDR solutions, analyzing alerts, suspicious behaviors, and indicators of compromise (IOCs). * Administer and fine-tune WAF (Web Application Firewall) rules to protect web applications against attacks such as SQL Injection, XSS, DDoS, among others. * Perform basic forensic analysis and incident investigation. * Develop, review, and maintain incident response playbooks and procedures. * Collaborate closely with infrastructure, networking, cloud, development, and SOC teams. * Prepare technical and executive reports on incidents, risks, and improvements. * Support threat hunting activities and continuous improvement of security controls. * Ensure compliance with internal policies, industry best practices, and security frameworks. **Requirements and Qualifications:** * Proven experience in Information Security, with emphasis on Incident Response. * Solid knowledge of SIEM, XDR, and WAF tools. * Experience analyzing logs, security alerts, and network/system events. * Knowledge of network protocols, operating systems (Windows/Linux), and security concepts. * Familiarity with frameworks and best practices such as NIST, MITRE ATT\&CK, ISO 27001\. * Ability to operate effectively in critical environments under pressure. * Strong communication skills for interaction with both technical and non-technical stakeholders. **Work Schedule**: Hybrid (3 days onsite, 2 days remote) **Work Location**: Belo Horizonte (Luxemburgo) **Our Benefits:** ️ Meal allowance of BRL 1,109.90 per month; Food allowance of BRL 882.45 per month; 13th-month food allowance; Profit-sharing program (PLR); * ️ Medical assistance; Dental assistance; ️ +Health Program: Telemedicine; Private pension plan; Childcare allowance of BRL 678.08 per child up to age 6; Maternar Program: Professional support throughout pregnancy and postpartum; Lactation room for mothers returning to work; Wellhub (formerly Gympass); ️ Birthday day off; Potencializa: Our internal e-learning platform; Employee loan program; * Reduced workweek: 40 hours per week; At BS2, we actively encourage applications from individuals of diverse ethnicities, genders, religions, sexual orientations, and/or nationalities. We welcome candidates with disabilities for all available positions. Everyone is truly welcome!