Ensure the continuity, security, and evolution of the information technology infrastructure, ensuring that physical and logical resources are always available, updated, and aligned with the operational needs of the organization, through efficient, preventive, and innovative management. **Responsibilities and duties** * Configure and manage security policies in Linux operating systems, including access control, file permissions, and firewall configurations; * Monitor event logs on Linux servers and workstations to identify suspicious or anomalous activities; * Apply patches and security updates to Linux systems, in accordance with established guidelines; * Implement hardening practices on Linux servers and workstations, aligned with the organization's security standards; * Conduct periodic compliance audits on Linux systems, verifying adherence to internal and regulatory security policies; * Evaluate user permission and privilege configurations in Linux systems to identify deviations or excessive access; * Document security incidents related to the Linux environment and propose technical recommendations for mitigation; * Collaborate with internal teams in the investigation of incidents involving Linux systems; * Prepare technical reports on the security status of Linux systems and performance metrics of the tools used; * Configure and maintain firewalls and other protection tools in Linux systems, such as iptables and UFW (Uncomplicated Firewall); * Perform periodic scans for vulnerability detection on Linux servers and workstations; * Conduct integrity audits of critical files and logging systems in Linux environments; * Evaluate the use of privileged accounts and segregation of duties in Linux systems during audits; * Implement and manage data encryption solutions in Linux systems, such as LUKS (Linux Unified Key Setup), for the protection of sensitive information; * Evaluate and configure application control policies (SELinux/AppArmor) to prevent the execution of unauthorized software; * Monitor and respond to security alerts generated by SIEM (Security Information and Event Management) tools specific to Linux environments; * Implement and monitor security policies for the protection of critical services, such as SSH, LDAP, and databases in Linux systems; * Perform forensic analysis on compromised Linux systems to identify attack vectors and impacts; * Evaluate and implement multi-factor authentication (MFA) solutions in Linux environments; * Develop resilient and secure architectures for Linux systems, including network segmentation, load balancing, and implementation of granular controls to minimize attack surfaces; * Conduct advanced attack simulations, such as zero-day vulnerability exploitation, privilege escalation techniques, and lateral movement, to identify failures and propose robust improvements; * Create and maintain custom scripts (in Bash, Python, or other languages) to automate tasks such as containment of compromised endpoints, deactivation of suspicious accounts, and malware removal; * Design and execute advanced strategies for the prevention, detection, and recovery of ransomware attacks, including immutable backups, rapid restoration of critical systems, and regular disaster scenario simulations; * Perform other activities related to information security and Linux environments, as required by operations. **Requirements and qualifications** **EDUCATION** * Completed higher education in the field of Information Technology (IT). **PROFESSIONAL EXPERIENCE** * Experience in information security or Linux environments. Experience must be demonstrated through a Corporate Contract or Work Card, which must include start and end dates for the activity. **CERTIFICATIONS/COURSES/TRAININGS;** * ITIL 4 training, with a minimum workload of 12 (twelve) hours. * Official ITIL 4 Foundation or higher certification * Linux Professional Institute LPIC\-3 Security certification. *Possess one of the following certifications:* ECSA (EC\-Council Certified Security Analyst) or CySA\+ (CompTIA Cybersecurity Analyst) or ECIH (EC\-Council Certified Incident Handler) or CSIH (Certified Specialist Incident Handler). **Additional information** **Our benefits:** Hapvida, Bradesco, or Unimed health plan (according to the values of the regional CCT); Hapvida Odonto or Bradesco Dental dental plan; Food or Meal Voucher; Life insurance 100% covered by Lanlink; Totalpass; Pharmacy agreement; Colleges agreement; Corporate Education Platform; Welcome Kit to the baby world; Moodar Platform. **It is good to have you here with us — even if virtually! How about we get to know each other better?** The **Lanlink Group** has 37 years of history building experiences that transform not only companies but also people's lives, operating in the five regions of Brazil. We think about the future with the purpose of impacting lives and being a safe harbor for innovation. Our spaces are built by those who make Lanlink happen every day: our employees, who wear the shirt and build, together, a cheerful, collaborative, and inspiring work environment. We believe that **trust** is the foundation of the relationship with our people and our clients. It is cultivated through practices such as: hiring and welcoming well, inspiring, speaking and listening, thanking, developing, caring, celebrating, and sharing. We are many. We are diverse. **\#WeAreLanlink.** And now, we want to get to know you too. Come be part of Lanlink! **Ah, and an important message:** all our positions are **preferential for PCD**.
João Silva
Indeed · HR
João Silva
Indeed · HR
