Security Analyst

Description

We are looking for a Security Analyst responsible for supporting the implementation, maintenance, and evolution of the organization's Information Security initiatives, contributing to strengthening corporate security controls, processes, and practices within a software development company. This position will have both strategic and operational responsibilities, working collaboratively with Infrastructure, DevOps, Engineering, Product, and Operations teams to translate security guidelines into practical actions, ensuring greater protection of the company’s environments, applications, data, and operations. **Apply below!** **Responsibilities and duties** * Security Operations: * Monitoring security events and alerts * Incident handling * Leading response and investigation processes Contribute to post-incident analyses * * Vulnerability Management: * Support execution of vulnerability scans and assessments * Track remediation plans * Monitor environment exposure Support periodic security reviews * * IAM (Identity and Access Management): * Support periodic access reviews * Assist onboarding and offboarding processes * Support MFA initiatives and privilege management Contribute to improving identity controls * * Cloud and Infrastructure Security: * Support validation of cloud environment configurations * Assist hardening processes * Support infrastructure protection controls Contribute to continuous improvement of environments * * Application Security: * Support AppSec and DevSecOps initiatives * Track application vulnerability remediation * Assist security reviews in projects Support use of code and dependency analysis tools * * Governance and Compliance: * Support maintenance of policies and procedures * Organize audit evidence * Assist initiatives related to ISO 27001 and LGPD Support compliance controls and risk management * * Continuity and Resilience: * Support backup and recovery testing * Assist validation of continuity plans * Contribute to improving disaster recovery processes **Requirements and qualifications** **We expect you to have** * Bachelor’s degree completed in Computer Science, Computer Networks, Information Systems, or related fields. * Solid experience in Information Security * Prior experience in Infrastructure, DevOps, or Security Experience in corporate environments * * Technical expertise in: * Networks and infrastructure * Windows and Linux operating systems * IAM and access control * Vulnerability management * Cloud security * SIEM and monitoring concepts * Backup and continuity * LGPD * AppSec and DevSecOps **It will be a plus if you have** * Information Security certifications such as Security+, SC-900, AZ-500, or equivalent. * Cloud certifications such as AWS Certified SysOps Administrator or Microsoft Certified: Azure Administrator Associate. * ITIL Foundation certification. * Virtualization certifications such as VMware VCP. * Networking certifications such as Cisco CCNA. * Knowledge or experience using Artificial Intelligence for threat detection and post-incident analysis. **Additionally, we consider the following competencies important:** * Generalist profile, curious and quick to learn new technologies. * Strong communication skills and ability to collaborate effectively across different areas. * Organizational skills and attention to detail. * Analytical capability and critical thinking for risk assessment. * Proactivity in identifying and resolving issues. * Continuous improvement mindset. * Interest in professional growth within the Information Security field. * Ability to translate strategies and guidelines into practical actions. * Alignment with our values of simplifying people’s lives, innovating, connecting, and leading. **Additional information** **Employment type:** CLT + Benefits **Work format:** Remote **Benefits:** * Fully covered health insurance plan for the employee; * Monthly remote work allowance; * Wellhub (Gympass); * Daycare allowance for children up to 5 years and 11 months old; * Meal/Voucher allowance; * Birthday day off; * Extended paternity leave (14 days); * Ongoing training for professional development; * Pluxe-Cuida Program: psychological, financial, and legal support; * SESC membership for leisure, culture, and well-being. #### **At Werecruiter, we believe organizational culture is the key to any company’s success.** #### **We are committed to creating an environment where innovation, respect, and personal growth form the foundation of our interactions.** #### **We value diversity and inclusion, ensuring that all our partners, employees, and clients feel welcomed and motivated to reach their full potential. By joining our team—or one of the companies we serve—you’ll contribute to a greater purpose: transforming the job market through meaningful human connections.**