Analista de Segurança da Informação SR na Evertec, maior empresa de software para o mercado financeiro do Brasil. Responsável por soluções de segurança, análise de vulnerabilidades e resposta a incidentes.
Responsibilities
Operate, administer and support the evolution of security solutions such as EDR, WAF, network micro-segmentation tools and password vaults (PAM);
Analyze vulnerabilities, support remediation plans and follow up on fixes with technical teams;
Support initiatives for privileged access controls, network segmentation and attack surface reduction;
Act in information security incident response, including analysis, containment, eradication and lessons learned;
Monitor security events in conjunction with the SOC (Security Operations Center);
Investigate alerts from security tools and coordinate mitigation actions;
Prepare technical reports on incidents, risks and security metrics;
Serve as a technical point of reference for junior and mid-level analysts;
Support the definition and continuous improvement of security and incident response processes;
Requirements
Proven experience as a Senior Information Security Analyst or similar role;
Demonstrated experience with security tools, including: - EDR (Endpoint Detection and Response); - WAF (Web Application Firewall); - Network micro-segmentation tools and password vaults; - PAM (Privileged Access Management) and ZERO TRUST;
Strong knowledge and hands-on experience in Security Incident Response, preferably in high-criticality environments (financial sector);
Knowledge of log analysis, threat investigation and event correlation;
Experience with vulnerability management processes;
Bachelor's degree completed;
The following will be considered a plus:
Intermediate/Advanced English;
Certifications: CEH, CND, CompTIA Security+;
Knowledge of frameworks such as NIST, CIS or ISO 27001;
Experience with SIEM, automation and incident response orchestration;
Information security certifications (Security+, CEH, CySA+, or similar);
Experience with cloud environments (Azure, AWS or GCP);
Experience in SOC environments;
Solid experience with password vault solutions;
Benefits
Meal or food allowance;
Flexible Benefit (Flash);
Health insurance;
Partners for psychological, legal, financial and nutritional support (CLUDE, C4LIFE and ASQ);
Psicologia Viva (online psychology service);
Dental coverage;
Childcare assistance;
Support for children with special needs;
Fertility treatment assistance;
Extended maternity and paternity leave;
Transportation voucher or Home Office allowance (for telework contracts);
Gympass (Wellhub) and TotalPass;
Flexible working hours;
Life insurance;
Partnership club discounts;
Partnership with Sesc;
Just dress no code (no dress code);
Day off on your birthday;
Education incentive program (Beca);
PPR or Bonus – based on achievement of targets and results.
Cybersecurity Intern at KPMG engaging in projects aimed at digital transformation and innovation. Collaborating with global teams while learning from industry leaders in various technologies.
Sales Development Representative responsible for proactive lead generation and pipeline development in cybersecurity sector. Collaborating with sales teams and engaging with enterprise clients in DACH region.
Principal Cybersecurity Engineer at Progress, focused on IAM governance and architecture strategy. Collaborating with teams for enterprise identity security governance and architectural oversight.
Client Advisor for Social Security Scotland, helping people apply for benefits via calls and webchat. Processing applications and managing client information in a supportive role.
Information Security Manager at IT - Total protecting critical information and enhancing clients' resilience to cyber threats. Role involves strategy and operations in information security.
Cloud Security Consultant (Jr.) joining NVISO to protect European society from cyber attacks. Working with Azure or Microsoft 365 cloud services focusing on security in a supportive environment.
Security Engineering Advisor partnering with CISO to shape security direction at Montel in Oslo. Managing security execution and supporting cross - functional teams within a growing SaaS environment.
Senior Cybersecurity Incident Responder supporting cybersecurity operations of a global pharmaceutical company. Leading security investigations and strengthening incident response capabilities.
Information Security Lead responsible for governance and risk management at VFX Financial. Overseeing SOC operations and implementing security frameworks and practices for compliance.
Director of Corporate Security & Resilience driving security initiatives and business continuity for OQC in a hybrid role. Leading cross - functional collaboration to manage complex security challenges.