Security Analyst

Description

We are looking for a Security Analyst responsible for supporting the implementation, maintenance, and evolution of the organization's Information Security initiatives, contributing to strengthening corporate security controls, processes, and practices within a software development company. This role will have both strategic and operational responsibilities, working closely with Infrastructure, DevOps, Engineering, Product, and Operations teams to translate security guidelines into practical actions, ensuring greater protection of the company's environments, applications, data, and operations. For over 30 years, we have developed solutions that help public and private organizations—leaders in Brazil—to achieve their goals by improving management performance. We have a team of specialists in education, human resource management, healthcare, and technology to ensure your business's digital transformation. **If you are interested in working with cutting-edge technologies at a company that values:** **A digital and relaxed environment** * A diverse, multicultural team full of opportunities * **Autonomy at work** * We recognize your talent. Have the freedom to propose solutions * **Development** * We value your dedication and want you to grow with us * **Making a difference** * Grow with us and change the lives of millions of people * ***We are seeking a Security Analyst!*** **Responsibilities and duties** Security Operations: * Monitoring security events and alerts * Incident handling * Leading response and investigation processes * Contributing to post-incident analyses Vulnerability Management: * Supporting vulnerability scans and assessments * Tracking remediation plans * Monitoring environment exposure * Supporting periodic security reviews IAM (Identity and Access Management): * Supporting periodic access reviews * Assisting onboarding and offboarding processes * Supporting MFA initiatives and privilege management * Contributing to identity control improvements Cloud and Infrastructure Security: * Supporting cloud environment configuration validations * Assisting hardening processes * Supporting infrastructure protection controls * Contributing to continuous improvement of environments Application Security: * Supporting AppSec and DevSecOps initiatives * Tracking application vulnerability remediation * Assisting security reviews in projects * Supporting use of code and dependency analysis tools Governance and Compliance: * Supporting maintenance of policies and procedures * Organizing audit evidence * Assisting initiatives related to ISO 27001 and LGPD * Supporting compliance controls and risk management Continuity and Resilience: * Supporting backup and recovery testing * Assisting continuity plan validation * Contributing to disaster recovery process improvements **Requirements and qualifications** **We expect you to have** * Bachelor’s degree completed in Computer Science, Computer Networks, Information Systems, or related fields. * Solid experience in Information Security * Prior experience in Infrastructure, DevOps, or Security * Experience in corporate environments Technical expertise in: * Networks and infrastructure * Windows and Linux operating systems * IAM and access control * Vulnerability management * Cloud security * SIEM and monitoring concepts * Backup and continuity * LGPD * AppSec and DevSecOps **It will be a plus if you have** * Information Security certifications such as Security+, SC-900, AZ-500, or equivalents. * Cloud certifications such as AWS Certified SysOps Administrator or Microsoft Certified: Azure Administrator Associate. * ITIL Foundation certification. * Virtualization certifications such as VMware VCP. * Networking certifications such as Cisco CCNA. * Knowledge or experience using Artificial Intelligence for threat detection and post-incident analysis. **Additionally, we consider the following competencies important:** * Generalist profile, curious and quick to learn new technologies. * Strong communication skills and ability to collaborate effectively across different areas. * Organization and attention to detail. * Analytical ability and critical thinking for risk assessment. * Proactivity in identifying and resolving problems. * Continuous improvement mindset. * Interest in professional growth in the Information Security field. * Ability to translate strategies and guidelines into practical actions. * Alignment with our values: simplifying people’s lives, innovating, connecting, and leading. **Additional information** * Employment type: REMOTE - CLT **Benefits that make a difference:** Continuous training to keep you ahead VA/VR for your daily comfort Comprehensive medical assistance for your well-being Day Off in your birthday month because celebrating matters Wellhub - Gympass for body and mind care Pluxe-Cuida, offering psychological, financial, and legal support SESC for leisure, culture, and well-being Extended paternity leave to spend more time with your family **ABOUT TECHNE** Techne is a technology company that simplifies people’s lives every day. We operate across three main business lines, each targeting a specific market segment: **Agile Development (Cronapp):** A platform that accelerates the development lifecycle—from ideation to deployment—allowing up to 70% time savings when developing complex systems. **Educational Management (Lyceum):** Comprehensive digital solutions and services for academic, administrative, and financial management of educational institutions, unifying all processes—including prospecting through graduation—into a single system. **Human Resource and Payroll Management for the Public Sector (Ergon):** A human resource and payroll management system designed exclusively for the public sector. It processes R$130 billion annually in personnel expenses. We are passionate about innovation and foster collaboration among teams to work with greater synergy. Our commitment is to deliver value to our clients and create experiences that make daily routines simpler and smoother through our solutions and services. **Check out our open positions and simplify with us.**