Senior Information Security Analyst with a focus on Firewall - Security Operation

Description

Magalu Cloud is the cloud computing services platform created by the country's largest and most innovative retail company, Magazine Luiza. We were born in 2020, with a clear purpose: To boost Brazil's competitiveness through technology. We offer hyperscale cloud services with local engineering, a simplified interface, prices in reais below the market, and support in Portuguese, making the cloud more accessible to everyone. We are looking for a **Senior Information Security Analyst** with a strong focus on **Firewall** who will be **r**esponsible for the architecture, implementation, advanced maintenance, and continuous improvement of the organization's firewall solutions (NGFW, WAF, Cloud Firewalls). They will act as a technical reference (Level 3\) for resolving complex network security incidents, defining strict access policies, ensuring compliance with global security frameworks, and leading strategic projects for segmentation and protection of **perimeter and cloud.** **Responsibilities:** * Design, implement, and manage complex Next-Generation Firewall (NGFW) and Web Application Firewall (WAF) infrastructures. * Define, review, and continuously optimize firewall rules and policies to ensure the principle of least privilege without impacting business operations. * Lead network segmentation (Zero Trust) projects and firewall integration in hybrid/multi\-cloud environments. * Perform advanced troubleshooting (L3\) of network and security incidents, such as DDoS attacks, improper blocks, and complex routing. * Conduct periodic audits of firewall rules, ensuring cleanup (rule cleanup) and compliance with standards (e.g., PCI\-DSS, ISO 27001\). **Mandatory Requirements:** * Practical experience in network security engineering, working directly with the administration, architecture, and troubleshooting of firewalls in high-complexity, mission-critical, or large-scale Datacenter environments. * Have worked with a systemic and architectural vision, understanding the convergence of complex networks to design security solutions that protect the perimeter and east\-west traffic without creating performance bottlenecks. * Have advanced analytical capabilities in network traffic analysis and deep packet inspection (using tools such as tcpdump, Wireshark, and PCAP) for *troubleshooting* complex problems (e.g., asymmetric routing, *throughput* drops, packet fragmentation issues). * Master the management and evolution of WAF, implementing best practices for vulnerability mitigation (OWASP Top 10\), protection against *bots* and L7 attacks, and performing constant fine *tuning* to eliminate false positives without compromising application security. * Solid knowledge and practical experience in integrating firewalls with dynamic routing protocols in corporate environments (BGP, OSPF), as well as a deep understanding of TCP/IP, IPsec, SSL/TLS, and large-scale NAT. **Desirable Requirements:** * Advanced certifications: PCNSE (Palo Alto), NSE 7/8 (Fortinet), CCSE (Check Point), or equivalents. Here at **Magalu Cloud**, we believe in people who build together and promote an environment of constant learning and innovation. If you identify with this profile, we want to get to know you! We value autonomy, responsibility, and agile deliveries, with a collaborative and bureaucracy-free environment. Our pace is fast, but we balance quality and planning. We also value diversity and inclusion in all our positions. Here at Magalu Cloud, everyone is well\-come – regardless of gender, race, sexual orientation, disability, or any other characteristic. Do you fit the profile? Come be part of our team!