Description
Our purpose is to take care of our employees so they can take care of our customers. We are a Great Place to Work (GPTW) at our core, and we operate with integrity, transparency, and a deep appreciation for people. If you are a proactive self-starter seeking continuous development, join Alianzo!
**Job Description**
We are looking for an **Information Security Analyst (InfoSec)** to protect corporate environments, ensuring the confidentiality, integrity, and availability of company information.
This professional will be responsible for implementing, monitoring, and enhancing security controls; supporting governance initiatives; managing vulnerabilities; responding to incidents; ensuring compliance; and proactively mitigating cyber risks in on\-premises and multi\-cloud environments.
**Responsibilities and Duties:**
**What are the responsibilities for this role?**
* Monitor and manage information security tools.
* Identify, analyze, and respond to security incidents.
* Conduct vulnerability assessments and support remediation efforts.
* Implement security policies, standards, and controls.
* Support internal and external audits related to security and compliance.
* Manage access, identities, and privileges.
* Monitor logs, security events, and indicators.
* Support cloud and corporate infrastructure protection initiatives.
* Participate in server, network, and application hardening projects.
* Perform risk analysis and recommend security improvements.
* Support security awareness and training programs.
* Collaborate closely with infrastructure, cloud, and development teams.
* Ensure adherence to LGPD policies and compliance requirements.
* Create technical documentation, procedures, and security reports.
* Contribute to defining secure architectures for new projects.
**Requirements and Qualifications:**
**What will we evaluate?**
* Experience in information security and cybersecurity.
* Knowledge of: TCP/IP networks; firewalls; VPNs; IDS/IPS; proxies; WAFs.
* Knowledge of: Vulnerability management; system hardening; antivirus/EDR/XDR; SIEM; IAM/PAM.
* Experience with: Log analysis; incident response; access management; security monitoring.
* Knowledge of environments: Linux; Windows Server; containers and Kubernetes.
* Experience with cloud security: AWS; Azure; Google Cloud Platform (GCP); Oracle Cloud Infrastructure (OCI).
* Knowledge of frameworks and compliance standards: LGPD; ISO 27001; CIS Benchmark; NIST; Zero Trust.
* Strong analytical and troubleshooting skills.
**Desirable Cloud Security Knowledge:**
* **AWS:** IAM; Security Groups; AWS WAF; GuardDuty; Security Hub; CloudTrail; AWS Config; KMS.
* **Azure:** Microsoft Defender for Cloud; Azure Sentinel; Azure AD / Entra ID; NSG; Key Vault; Azure Firewall.
* **Google Cloud Platform (GCP):** Cloud IAM; Security Command Center; Cloud Armor; Cloud Logging; VPC Firewall Rules.
* **Oracle Cloud Infrastructure (OCI):** OCI IAM; OCI Cloud Guard; OCI Security Zones; OCI Bastion; OCI Logging \& Monitoring; OCI WAF; OCI VPN IPSec and FastConnect.
**Differentiators:**
* Knowledge of security automation.
* Experience in multi\-cloud and hybrid environments.
* Experience with SOAR tools.
* Certifications: Security\+; ISO 27001; SC\-900 / SC\-200; AWS Security Specialty; Azure Security Engineer Associate; Google Professional Cloud Security Engineer; OCI Security Professional; CEH; CISSP.
**What Are We Looking For?**
We seek individuals with an **owner mindset**, who believe in the business and drive results.
People who take ownership and responsibility for their outcomes, working autonomously and with high technical proficiency.
* Analytical and investigative profile.
* Proactivity and critical thinking.
* Strong communication and teamwork skills.
* Organized and detail-oriented.
* Ability to perform under pressure.
* Continuous improvement orientation.
* Strong commitment to security and compliance.
Minimum Education: Bachelor's Degree
* Day Off
* Flexible Benefits Card
* Life Insurance
* Marriage Allowance
* Health Plan
* Transportation Benefit
* Dental Plan
* WellHub
* Career Development Plan
* Profit Sharing (PLR)