Senior Information Security Engineer

Description

We are looking for people **passionate** about **education** and **technology**! We want you to thrive in an environment that demands the integration of **multiple competencies** and **experiences**, with a **results-oriented focus**, so we can leave our legacy in the world. If you, like us, are passionate about education and technology, UOL EdTech is the place for you! **Check out this opportunity and join us as an \#EdTecher!** **Responsibilities and duties** * Implement and monitor security controls in AWS and Azure environments. * Ensure cloud resources comply with defined security standards and policies. * Automate security checks using native cloud tools and scripts. * Conduct regular scans of systems and applications to identify vulnerabilities. * Prioritize, report, and track remediation efforts with responsible teams. * Perform risk analyses related to identified vulnerabilities and propose action plans. * Collaborate with development teams to ensure implementation of secure coding practices (Secure Coding). * Deploy and manage WAF tools to protect against threats. * Apply frameworks such as NIST, CIS Controls, and ISO 27001 to structure and review security controls. * Contribute to defining and updating security policies and standards. * Monitor security events and investigate related incidents. * Propose and implement improvements to detection and response processes. **Requirements and qualifications** * Bachelor’s degree (completed or in progress) in Information Security or related fields. * Experience with networks, firewalls, and security solutions support. * Proficiency in frameworks such as NIST CSF, CIS Controls, and ISO 27001\. * Knowledge of TCP/IP network infrastructure, SIEM (Google Secops), Digital Certificates, Network Protocols, Firewalls, and WAF. * Experience in Application Security, including static and dynamic code analysis. **Additional information** **To stand out in this role, it would be great if you also have:** * Technical English. * Courses or certifications in Networking, Cybersecurity, or Cloud Security for AWS, Azure, or GCP. * Availability to work in a hybrid model (3 days per week) in São Paulo \- SP. **We are a company that transforms lives through education powered by technology, offering a complete ecosystem of solutions for students, educational institutions, and enterprises.** We work hard to deliver the best digital learning experience, helping remove barriers, expanding access to quality education, and leaving our legacy in the world. UOL EdTech is part of Grupo UOL, a 100% Brazilian company revolutionizing the digital universe since 1996 — and from this legacy, we carry credibility, pioneering spirit, and innovation in our DNA. **Discover our ecosystem** We offer a complete education ecosystem that transforms lives! Our business verticals are: * **For Students:** We provide the largest online study platform, facilitating daily access to knowledge, empowerment, and shaping people’s futures. In Brazil, we operate under the brand Passei Direto; globally, under Studenta. * **For Enterprises:** We have two business lines: Learning.Rocks offers a comprehensive solution to meet corporate training needs, combining technology and multi-format content; Qulture.Rocks supports companies in unlocking their teams’ potential through a people and performance management platform. * **For Educational Institutions:** We serve as the technology partner for major universities delivering 100% online specialization courses, enrolling students across Brazil and worldwide. **We are passionate about education and technology** Technology fuels us — we constantly seek disruptive, tech-driven solutions to break down barriers and deliver our education solutions to every corner of the world! **The collective is stronger than the individual** We always pursue the best outcome, even if it means changing course. We’re on a long-term journey building a sustainable, high-impact business. We are \#EdTechers — and this is our way of being and doing! **Our differences add up to fulfill our purpose** We believe diversity and plurality drive extraordinary results! Therefore, we do not discriminate based on disability, gender, sexual/affectional orientation, race/ethnicity, age, origin, family composition, or appearance. **Discover the benefits of being an \#EdTecher** You’ll enjoy a comprehensive benefits package that truly makes a difference: * Meal allowance and/or food voucher. * Health and dental insurance. * Life insurance. * Partnerships with TotalPass and ZenKlub. * Extended maternity and paternity leave. * Childcare assistance. * Up to 50% discount on postgraduate and MBA programs from top institutions, such as FIA, FAAP, and PUCRS. **And more — take a look:** * Dress code: wear whatever makes you feel comfortable. * \#TáDeParabéns: Birthday day off. * Baby gift: present for newborns. **Learn how our selection process works** Not all processes follow the same format, but most proceed similarly: * Application (the one you’re completing here on Gupy). * Interview with the Recruitment & Selection team. * Technical challenge — this may be a test, case study, portfolio presentation, or even a technical discussion with the team. * Interview with the area leadership. **An important tip for you** Give your best effort at each stage — especially during application! We carefully review every application, which may take some time. So, if you’re wondering about the timeline for our response, we kindly ask for your empathy. Everyone who applies receives feedback via Gupy — whether positive or negative. Please monitor your application status here and in your email inbox — and don’t forget to check your spam folder, agreed? So, shall we transform lives through education powered by technology? **Join us as an \#EdTecher!**