Information Security Administrator - Mid-Level

Description

**We are looking for someone to perform the following activities:** a) Implement and manage perimeter and secure access controls, including next-generation firewalls, corporate VPNs, and IDS/IPS systems, ensuring network environment integrity and availability. b) Manage identities and access via Active Directory, LDAP, and multi-factor authentication (MFA), defining least-privilege policies and conducting periodic account reviews. c) Apply data encryption and protection, configuring SSL/TLS, public key infrastructure (PKI), and ensuring compliance with GDPR/LGPD and other legal requirements. d) Monitor security and respond to incidents using SIEM platforms (Splunk, IBM QRadar, ArcSight), corporate antivirus solutions, and continuous log analysis, conducting timely investigations and remediations. e) Ensure compliance with security standards and frameworks (ISO 27001, NIST, CIS Controls), developing and maintaining policies and procedures aligned with best practices. f) Perform hardening of Windows and Linux servers, applying patches, disabling unnecessary services, and configuring advanced security parameters. g) Conduct internal/external audits and use compliance tools to identify gaps, create action plans, and track execution until full mitigation. h) Execute penetration tests and vulnerability assessments using Kali Linux, Metasploit, and Burp Suite, documenting findings and recommending remediations. i) Analyze malware and conduct forensic investigations using Autopsy, EnCase, and data recovery techniques, producing detailed reports for legal and investigative support. j) Configure and monitor cloud security controls (AWS Security, Azure Security, Google Cloud Security), ensuring governance and compliance in hybrid environments. k) Integrate security into CI/CD pipelines, implementing automated checks with SonarQube, Checkmarx, and other DevSecOps tools to prevent code vulnerabilities. l) Develop defensive automations and scripts in Python, PowerShell, and Bash to orchestrate responses, collect evidence, and optimize security routines. m) Apply AI-based threat detection techniques by training models and tuning rules to identify anomalous behavior and reduce false positives. **What skills are required:** a) Be of legal age; b) Hold a diploma or certificate, duly registered, certifying completion of an undergraduate degree in Information Technology, recognized by the Ministry of Education (MEC). c) Possess CCNP (Cisco Certified Network Professional) certification; d) Minimum of 3 (three) years of proven professional experience covering the following tools and knowledge areas: d.1\) Network Security: Firewalls, VPNs, IDS/IPS (Intrusion Detection/Prevention Systems). d.2\) Identity and Access Management: Active Directory, LDAP, multi-factor authentication (MFA). d.3\) Cryptography and Data Protection: SSL/TLS, PKI, GDPR/LGPD. d.4\) Security Monitoring and Incident Response: SIEM (Splunk, IBM QRadar, ArcSight), corporate antivirus solutions, log analysis. d.5\) Security Standards and Frameworks: ISO 27001, NIST, CIS Controls. d.6\) System Hardening: Securing Windows and Linux servers. d.7\) Auditing and Compliance: Compliance tools, security audits. d.8\) Kali Linux, Metasploit, Burp Suite. d.9\) Malware analysis, data recovery, Autopsy, EnCase. d.10\) AWS Security, Azure Security, Google Cloud Security. d.11\) Security in CI/CD pipelines, tools such as SonarQube and Checkmarx. d.12\) Python, PowerShell, Bash (defensive automation and scripting). d.13\) AI-powered threat detection. Payment: R$9\.716,66 \- R$9\.716,67 per month Benefits: * Medical assistance * Meal allowance * Food voucher * Transportation allowance Work location: On-site