. **Responsibilities and duties** * Monitor, analyze, and respond to security incidents, acting in the identification of threats and the definition of containment and mitigation measures; * Identify, assess, and track the treatment of vulnerabilities in applications, systems, infrastructure, and cloud environments; * Act in vulnerability, risk, and security incident management processes; * Support the execution of security tests, technical assessments, and periodic audits; * Participate in the implementation and evolution of Security by Design and DevSecOps practices, integrating security into the software development cycle; * Work together with development teams to identify and correct vulnerabilities in applications; * Develop and maintain information security policies, procedures, standards, and controls; * Produce technical reports related to risks, vulnerabilities, incidents, and threats; * Support the tracking of compliance and security requirements, considering frameworks and regulations such as ISO, NIST, and LGPD; * Promote the dissemination of best practices and internal awareness regarding Information Security; * Track threats, vulnerabilities, and market trends, proposing continuous improvements in security controls. **Requirements and qualifications** * Application Security (AppSec); * SOC / Security Operations; * Cloud Security, especially Azure environments; * Offensive Security / Pentest; * DevSecOps; * Vulnerability and risk management; * Security incident response and treatment. Desirable knowledge * Information Security; * OWASP and main application vulnerabilities; * Azure DevOps; * DevSecOps and Security by Design concepts; * Security in Cloud/Azure environments; * Vulnerability and incident management; * Frameworks and best practices such as NIST and ISO 27001; * Knowledge of LGPD and data protection requirements; * Tools and practices for monitoring, analysis, and incident response. Compass UOL is a global firm and part of the AI Revolution Company, together transforming organizations using Artificial Intelligence, Generative AI, and other of today’s most advanced technologies. We equip our team with proprietary and external AI\-driven tools to design and build digital\-native platforms, integrating cutting\-edge technologies and enabling companies to innovate, transform their businesses, and drive success in their markets. To achieve this, we attract and develop the best talent, creating opportunities that enhance people’s lives and highlight the positive impact of disruptive technologies. We empower borderless talent and promote knowledge and opportunities in the latest market trends, driving significant personal and professional growth. **Join us and be part of the AI\-driven revolution.**
João Silva
Indeed · HR
João Silva
Indeed · HR
