Mid-Level Information Security Analyst | Cloud & Data Security

Description

Job Summary: We are seeking a Mid-Level Information Security Analyst to strengthen cloud environment security and data protection, with a focus on technical execution, operations, and continuous improvement. Key Highlights: 1. Hands-on implementation of cloud security controls. 2. Support for securing modern workloads and data protection. 3. Ensuring compliance and mitigating information security risks. Nice to meet you — we’re Evertec! Evertec is a company specializing in **technology for the financial sector**, with over 27 years of experience and presence in 26 countries across Latin America and the Caribbean. Processing over 11 billion transactions annually, we are a reference in solutions that drive digital transformation in the market. We offer a comprehensive portfolio of **software solutions**, serving financial institutions, enterprises, and fintechs seeking **innovation, security, and efficiency**. Our commitment is to **technological excellence**, financial inclusion, and generating sustainable value for customers, employees, and partners — fostering a more connected and accessible ecosystem. Requirements: The **Information Security** team is responsible for ensuring robust technical controls and supporting business units in risk mitigation. We seek a **Mid-Level Information Security Analyst** to strengthen cloud environment security and data protection, focusing on technical execution, operations, and continuous improvement. This professional will work hands\-on, supporting the implementation of security controls, monitoring, compliance, and protection of workloads and sensitive data in cloud environments. **This role will be responsible for:** * Supporting the implementation and maintenance of security controls in IaaS, PaaS, and SaaS environments. * Implementing cloud IAM policies, including access control, groups, roles, and permissions. * Supporting the application of least privilege and segregation of duties principles. * Implementing and maintaining security baselines, image hardening, and standard cloud configurations. * Supporting cloud infrastructure protection, including networks, VMs, containers, and managed services. * Supporting security for modern workloads such as containers, Kubernetes, and serverless — guided by senior analysts. * Supporting Cloud Security Monitoring tool operations, alert analysis, and incident tracking. * Supporting CSPM activities, monitoring compliance deviations and corrective action plans. * Supporting data protection initiatives, including: * Data encryption using KMS services. * Implementation and operation of DLP controls in cloud environments. * Collaborating with technical teams to ensure solutions align with security guidelines. * Supporting audit, compliance, and technical evidence generation processes. * Strong knowledge of operating systems, Windows and Linux. * Basic to advanced knowledge of networking and TCP/IP protocols. * Familiarity with integrating cloud tools with SOC. * Producing, maintaining, and reviewing information security technical documentation — including processes, standards, operational procedures, architectures, and control flows — ensuring clarity, traceability, and adherence to internal and regulatory standards. **To \#match, this position requires the following mandatory qualifications:** * Prior experience in information security, infrastructure, cloud, or related areas. * Practical experience operating security controls in cloud environments (Azure, AWS, or GCP), including IAM, hardening, or monitoring. * Experience with security operational processes such as alert analysis, initial incident investigation, or supporting audits and compliance with technical evidence generation. * Intermediate or advanced English proficiency for reading technical documentation. * Completed undergraduate degree; **The following knowledge or experience would be considered advantageous:** * Knowledge of cloud platforms (Azure, AWS, or GCP). Familiarity with NIST, ISO 27001, and LGPD. * Entry-level or ongoing certifications (AZ\-900, Security\+, SC\-300\). * Experience with automation, scripting, or infrastructure-as-code will be considered an advantage. * Knowledge of firewalls and networking * Akamai – WAF – Guardicore Benefits **So, does this resonate with you so far? Then let us tell you what else you’ll find here, beyond a dynamic environment:** * Meal or food allowance; * Flexible Benefit (Flash); * Health insurance; * Partners for psychological, legal, financial, and nutritional support (CLUDE, C4LIFE, and ASQ); * Psicologia Viva; * Dental insurance; * Daycare allowance; * Allowance for children with special needs; * Fertility assistance; * Extended maternity and paternity leave; * Transportation allowance or Home Office allowance (for remote contracts); * Gympass (Wellhub) and TotalPass; * Flexible working hours; * Life insurance; * Partnership club; * Sesc partnership; * Just dress no code (no dress code); * Birthday day off; * Beca (education incentive program); * PPR or Bonus — based on goal and performance achievement. We value **diversity**, recognizing that what truly adds value is diverse ideas and perspectives. Therefore, race, color, religion, gender and gender identity, nationality, disability, sexual orientation, ancestry, or age will not prevent you from joining our team.