Senior Information Security Analyst

Description

Job Summary: We are seeking an Information Security professional with experience in Microsoft solutions and SIEM, focused on data protection and incident response to accelerate digital transformation. Key Highlights: 1. Direct involvement in Information Security or Cybersecurity 2. Experience with Microsoft 365 and Microsoft Entra ID environments 3. Knowledge of vulnerability management and incident response About bycoders\_: At bycoders\_, driving enterprise digital transformation through tailored technological solutions and corporate innovation workshops is in our DNA. For us, technology is a means to achieve goals—not the end goal itself. Therefore, our process combines tools, methodologies, and, above all, people—indispensable elements for delivering high-performance results. We are a fully remote software house—and were born this way, long before remote work became a trend Androida. Our solutions go beyond custom software; we also offer corporate innovation consulting and business modeling services. We embrace challenges and believe there’s always something new to learn, with a focus on building people-driven businesses (our coders\_) for people-driven outcomes (our clients). **Required Experience:** * Approximately three to six years of total professional experience in Information Technology. * At least two years of direct experience in Information Security or Cybersecurity. * Practical experience with Microsoft 365, Exchange Online, or Microsoft Entra ID environments. * Participation in MFA projects, identity reviews, access or privilege assessments. * Experience with SIEM, log centralization, or event monitoring. * Knowledge of vulnerability management, hardening, and remediation tracking. * Familiarity with incident response processes. * Experience drafting procedures, reports, risk registers, and action plans. * Ability to collaborate with vendors and infrastructure teams. **Required Technical Knowledge:** * Fundamentals of identity and access security. * Microsoft 365, Exchange Online, and Microsoft Entra ID. * Multi-factor authentication and conditional access principles. * Email security, phishing, and account compromise prevention. * SIEM concepts, event correlation, and alert handling. * TCP/IP networking, DNS, firewalls, VPNs, and directory services. * Windows security, and preferably basic Linux knowledge. * Vulnerability management, patching, and hardening. * Fundamentals of backup, restoration, business continuity, and disaster recovery. * Incident logging, classification, and response. * Technical and executive documentation authoring. **Desirable Knowledge:** * Practical experience with Wazuh, Elastic Stack, or equivalent solutions. * Microsoft Defender, especially Defender for Office 365 and Defender for Endpoint. * PowerShell for queries, assessments, and basic automation. * Oracle environments and database security and recovery concepts. * CIS Controls, NIST Cybersecurity Framework, or ISO 27001\. * LGPD and data protection controls. * Vulnerability management tools. * Experience with security awareness campaigns and phishing simulations. * Participation in security audits or assessments. **Benefits:** Remote position — PJ contract R$ 175.00 monthly allowance for electricity and internet expenses. After 3 months: R$ 250.00 monthly allowance for studies—because we want you to keep evolving! Free access to the Alura learning platform, offering a wide range of courses for your professional development. ️‍ ️ R$ 100.00 monthly allowance for health—whether at the gym or however you prefer. Want to upgrade your setup? R$ 1\.000.00 annually for improving your work equipment! ️ Plus: Every 6 months, one week of paid remote leave—to recharge your energy! Do you identify with this role? Apply now and join us in transforming the digital world!