**What does the Information Security area do at Porto?** The cybersecurity area plays a crucial role in protecting digital assets in an increasingly connected world. Its primary function is to safeguard systems, networks, data, and information against a variety of cyber threats, ensuring the confidentiality, integrity, and availability of these resources. The DLP Technical Specialist serves as the technical reference and architect for Data Loss Prevention solutions, responsible for strategy, continuous optimization, and leadership in responding to the most complex incidents. **Responsibilities and Duties** * **DLP Architecture and Design:** Lead the design, implementation, and continuous evolution of DLP architecture (Endpoint, Network, Cloud) in complex, multi-platform environments. * **Critical Incident Management and Response:** Coordinate triage, investigation, and response to high-severity DLP incidents, including initial forensic analysis and containment of persistent threats.1 * **Advanced Policy Optimization:** Develop methodologies and execute strategic fine-tuning of DLP rules and policies to maximize detection accuracy, drastically reduce false positives, and ensure regulatory compliance (LGPD, GDPR, HIPAA, SOX).1 * **Detection Engineering:** Create and enhance high-complexity classifiers, *detectors*, and regular expressions (Regex) to proactively and accurately identify sensitive and proprietary data.1 * **Automation and Integration (SOAR):** Promote integration of DLP platforms with SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation, and Response), and IAM (Identity and Access Management) solutions, developing scripts and automation routines (Python, PowerShell, Bash) to optimize incident response.1 * **DLP Suite Subject Matter Expertise:** Serve as a *Subject Matter Expert* (SME) in at least two of the leading market DLP suites (Skyhigh Security, Trellix, Broadcom/Symantec, Proofpoint, Forcepoint), including management of *upgrades* and migrations.1 * **Playbook and Standard Development:** Develop and maintain technical documentation, *playbooks*, and standard operating procedures (SOPs) for architectural and operational management of DLP solutions.1 * **Technical Mentoring:** Serve as a technical escalation resource and mentor for other analysts on the team, ensuring deep technical knowledge transfer in DLP. **Requirements and Qualifications** * **Multi-Platform DLP Architecture Proficiency:** Proven expertise in designing, deploying, and maintaining (Level 3/Architecture) at least three of the leading market DLP suites (Skyhigh Security, Trellix DLP, Proofpoint Enterprise DLP, Broadcom DLP, Palo Alto Networks DLP, Forcepoint), with focus on Network, Endpoint, and Cloud DLP. * **Regex and Scripting/Automation Proficiency:** Absolute mastery in creating and manipulating complex and advanced regular expressions for accurate identification of sensitive data. Strong proficiency in scripting languages such as Python, PowerShell, and Bash for automating critical DLP tasks and API-based integrations. * **Cloud Security and CASB (Expertise):** Advanced experience in designing and applying DLP and CASB (Cloud Access Security Broker) controls in multi-cloud environments (AWS, Azure, GCP), including deep expertise in policy enforcement and integration with native cloud tools (e.g., Prisma Cloud). * **Log and SIEM Forensic Analysis:** Expertise in collecting, parsing, and analyzing security logs, with advanced proficiency in SIEM platforms (Splunk, IBM QRadar, Microsoft Sentinel, Elastic Stack) for building complex correlation rules, detecting anomalies (UEBA), and developing DLP performance dashboards (KPIs). * **Network and Systems Architectural Knowledge:** Deep understanding of network architectures, communication protocols (TCP/IP, HTTP/S, SMTP, etc.), and network topologies. Robust experience in advanced management and *troubleshooting* of DLP agents across operating systems (Windows, Linux, macOS). * **Database Concepts and Discovery:** In-depth familiarity with database concepts and ability to interact with databases for structured and unstructured data discovery and advanced DLP policy configuration. **Additional Information** **BENEFITS** **Flexible Meal and Food Allowance;** **Health Insurance Plan;** **Dental Insurance Plan;** **Wellhub and TotalPass;** **Exclusive Bio Ritmo Gym for Employees:** located at the Matriz Complex; **Profit Sharing Program (PLR);** **Stock Option Program: Porto em Ação:** complementary to PLR until 2025; **Beach Volleyball and Multipurpose Courts:** located at the Matriz Complex; **Transportation Allowance;** **Van Transportation Services;** available at major access stations to Porto (Luz, Barra Funda, Santa Cecília, and Júlio Prestes); **Extended Parental Leave:** up to 40 days for all family configurations; **Extended Maternity Leave** of 6 months.; **Medical Clinic with Specialties:** located at the Matriz and Barra Funda complexes; **Childcare or Nanny Assistance;** **Life Insurance;** **Private Pension Plan – PortoPrev;** **Discounts on Products and Services;** **Scholarship Program: Reimbursement for undergraduate, graduate, or MBA studies;** **Monthly Running Events:** subsidy for major street races in São Paulo; **Language Reimbursement (English or Spanish);** **Teatro Porto:** exclusive sessions for employees; **Library;** **Rest Room:** located at the Matriz Complex; **Game Room:** located at the Matriz Complex; **Massage and Podiatry Services:** located at the Matriz Complex; **Work Location:** On-site (We operate hybrid work models, which will be discussed during the selection process); Porto is much more than an insurance company: it is a massive ecosystem leveraging technology to create solutions across four business verticals: **Porto Bank, Porto Saúde, Porto Seguro, and Porto Serviço**. Its reputation and recognition, earned over more than seven decades, underscore Porto’s scale — a business reference company built by and for people. Here, 13,000 employees proudly wear their hearts on their sleeves, **proud to be part of a solid and ethical organization**, **one that transforms dreams into fantastic realities** for our more than 15.8 million customers. We operate through over 101 branches and regional offices across Brazil. Learning is embedded in our DNA, and here you’ll find **incentives, tools, and great people to help you learn and grow every day**, in an inclusive and safe environment where everyone can be themselves and take pride in who they are — fostering respect and **living fully and well within a genuinely human company.** **DIVERSITY & INCLUSION AT PORTO** At Porto, we value diversity and believe that a plural team is essential for the development of our entire business, society, and each individual — because we understand that every person is unique in building a more innovative and inclusive environment. Together, we work daily to build a safe, free, and welcoming space, with greater plurality and respect. Therefore, **we strongly encourage applications from women, Black and Indigenous people, people with disabilities, and LGBTQIA+ individuals** for all our openings.
João Silva
Indeed · HR
João Silva
Indeed · HR
