Senior Information Security Analyst

Description

We are seeking a **Senior Information Security Analyst** for the corporate area**.** With hands-on experience in security operations, vulnerability management, incident response, and security controls within a distributed corporate environment. With the purpose of delivering **Solutions for Better Living**, we are part of cities’ and people’s daily lives through our brands **Deca**, **Ceusa**, **Portinari**, **Durafloor**, **Duratex**, and **Castelatto**. If you have an owner’s mindset, believe in leadership by example, and are interested in joining a collaborative environment that fosters innovation and embraces diversity, your place is here at **Dexco**. Apply now and join our transformation journey! Learn more about our brand at: dex.co **Responsibilities and Duties** * Monitor the vulnerability management process — from risk identification and prioritization through remediation direction, accountability follow-up, and status reporting to involved areas. * Support operational oversight of the outsourced SOC, evaluating KPIs, SLAs, service quality, recurring alerts, and opportunities to refine monitoring rules. * Assist in triaging, analyzing, investigating, and handling security alerts and incidents using available XDR, SIEM, and threat intelligence platforms. * Serve as the technical point of contact during incident response, supporting containment, eradication, recovery, and lessons-learned documentation. * Participate in crisis rooms and technical discussions related to critical events, contributing risk analysis, business impact assessment, and mitigation recommendations. * Assess false positives, recurring offenders, visibility gaps, and improvement opportunities in detection and response processes — supporting adjustments to rules, playbooks, and internal workflows. * Collaborate with infrastructure, network, development, endpoint, identity, cloud, and vendor teams to remediate vulnerabilities, investigate events, and reduce risks. * Support risk assessments for environment changes, technical projects, new solutions, and corporate initiatives. * Contribute to the creation and review of information security processes, procedures, playbooks, controls, and standards. * Support security posture improvement initiatives — including hardening, configuration reviews, monitoring adjustments, and expanded endpoint detection coverage. * Produce analyses, reports, metrics, and technical or executive recommendations related to vulnerabilities, incidents, risks, and controls. **Requirements and Qualifications** * Practical experience in vulnerability management within medium- or large-scale corporate environments. * Experience in security operations, monitoring, alert triage, event investigation, and incident response. * Experience with XDR and SIEM platforms, including alert investigation, event correlation, and support in creating or refining detection rules. Experience with Trend Micro Vision One will be considered a significant advantage. * Familiarity with log ingestion and centralization pipelines, collection agents, gateways, and platforms such as Chronicle / Google SecOps or equivalent solutions. * Knowledge of endpoint security tools. Experience with Sysmon or similar instrumentation to enhance visibility on workstations and servers is highly valued. * Experience with vulnerability management platforms — especially Tenable or equivalent — including scan execution, prioritization, and remediation tracking. * Knowledge of privileged access management platforms such as CyberArk or equivalent solutions. * Experience or familiarity with threat intelligence platforms, including IOC triage, campaign correlation, and use of tools like MISP to support investigations and responses. * Strong ability to assess technical risks related to changes, configurations, vulnerabilities, and security events. * Understanding of offensive security, penetration testing, and attacker techniques applied to risk prioritization and strengthening defensive controls. * Ability to correlate data across multiple sources — such as alerts, logs, IOCs, vulnerabilities, inventory, and business context — to support investigations and security decisions. **Desirable Experience** * Prior experience in medium- or large-sized companies, preferably with distributed environments, multiple plants, units, or branches. * Experience managing SOC providers, MSSPs, or managed security services — including SLA tracking, KPI evaluation, and operational quality oversight. * Experience in heterogeneous technology environments involving infrastructure, networks, cloud, identity, endpoints, and applications. * Participation in incident response, crisis rooms, or handling of critical events. * Experience in environments leveraging automation, orchestration, or playbooks to support investigations and incident response. * Participation in technical evaluations of information security tools, services, or solutions. * Experience reviewing security processes, operational metrics, and practices to improve operational maturity. **Additional Information** Aligned with our organizational culture, we **care for life wherever it is**. Here, we **invest in people** and **build outstanding teams**. Therefore, Dexco offers benefits and conveniences for its employees and their families: **Health and Well-being** ---------------------- * **Medical assistance** for you and your dependents; * **Dental assistance** for you and your dependents; * **Life insurance;** * **Wellhub:** access to gyms, physical, emotional, and nutritional wellness apps — including a free digital plan; * **Pharmacy benefit:** medications at special prices with payroll deductions; * **De Bem com a Mente (Well with Mind):** mental health program offering support and rehabilitation; * **Personal Emergency Assistance:** financial, psychological, legal, and social support; **Family** ----------- * **Gestar Juntos (Grow Together):** program providing support and guidance for pregnant individuals and dependents; * **Childcare allowance** for children up to 24 months old; **Meals and Transportation** ---------------------------- * **Meal voucher** or cafeteria and basic food basket (depending on the location); * **Transportation voucher or shuttle service** (depending on the location); **Financial** -------------- * **Profit and Results Sharing (PLR)** aligned with company performance and individual goals; * **Private pension plan:** the company contributes alongside you for your future; * **Special loans** via Itaúsa Foundation and payroll-deducted loans with preferential rates; **Development and Partnerships** ------------------------------- * **UniDexco:** online platform offering courses and training; * **Dexco Partnership Club:** discounts with nearly 700 partners; * **Dexco Store:** discounts on Dexco-branded products; **Other Benefits** --------------------- * **Christmas Card.** ***Further details and conditions regarding the above items will be provided upon offer to the selected candidate.*** **Brazil’s largest house of construction, renovation, and decoration brands.** Owner of the brands Deca, Portinari, Hydra, Duratex, Castelatto, Ceusa, and Durafloor, we are Brazil’s largest producer of industrialized wood panels, a leader in ceramic and metalware production in the Southern Hemisphere, and one of the country’s top manufacturers of surfacing materials. Guided by our purpose — **Solutions for Better Living** — we are today the sector’s company with the broadest portfolio of solutions, prioritizing consumer needs and delivering design, quality, functionality, and versatility in our products. We bring our brand promise — **Living Environments** — to life at Casa Dexco, our concept store presenting a new architectural and decorative retail experience. * 49% stake in LD Celulose, a joint venture for soluble cellulose production. * Publicly traded company since 1951\. Our **numbers**: * 75 years of history * \+ 10,000 employees * 23 industrial and forest units in Brazil and Colombia * 187,000 hectares of planted forests and conservation areas **Innovation**: We aim to lead the transformation of the renovation and construction sector through three programs: 1\. Open Dexco (open innovation) 2\. Imagine (intrapreneurship) 3\. DX Ventures (fund investing in startups). **Sustainability**: We consistently align our efforts with the commitments outlined in our Sustainability Strategy, which addresses the United Nations’ Sustainable Development Goals (SDGs). Learn more at: https://www.dex.co/