Senior Information Security Analyst focusing on developing secure architectures and implementing robust security solutions at ABC Brasil. Engaging in risk analysis and fostering security culture within the company.
Responsibilities
Plan and design security architectures for corporate projects, including cloud and on-premises environments, producing technical and reference documentation;
Define security requirements for new solutions and validate their compliance throughout the project lifecycle;
Propose, evaluate, and track the roadmap for security solutions;
Provide technical leadership for the implementation of security solutions and controls;
Collaborate with IT Architecture, Digital Channels, BaaS, Open Finance and Business areas to identify needs and recommend new solutions;
Perform risk assessments and threat analysis;
Conduct threat modeling (OWASP Threat Dragon);
Prepare security opinions and technical reports based on technical and regulatory requirements;
Ensure architectures comply with internal and regulatory standards and enforce mandatory application;
Monitor and enforce the Security by Design and Security by Default programs;
Document processes, architectural diagrams, and security flows;
Validate security controls and architectural components such as WAF, DLP, Firewall, IDS, IPS, API Gateway, API Proxy, EDR, SIEM, CNAPP, among others;
Participate in technical committees and multidisciplinary architecture and decision forums;
Manage and support the use of corporate tools from the Gartner quadrant;
Take part in technical interviews, onboarding of new team members, and mentoring;
Deliver internal trainings on tools and best practices;
Produce internal technical content (articles, documentation, guides) and environment control reports;
Support incident response and threat mitigation;
Review, create, and restructure technical documentation;
Continuously monitor the environment, identify improvements, and promote security best practices.
Requirements
Deep technical knowledge of infrastructure, networking, AppSec, data protection, cloud, and security applied to LLMs/AI;
Solid experience in information security with a focus on architecture, cloud security and cyber engineering;
Experience securing cloud environments, including architecture, governance and controls for availability, integrity and confidentiality (AIC), event logging, chain of custody and non-repudiation;
Proficiency with cloud components and infrastructure (IaaS / PaaS / SaaS) and native and third-party protection solutions;
Knowledge of APIs, communication protocols, encryption, key management, and security inventory;
Experience with market-leading tools (Gartner Magic Quadrant), including firewall, EDR/XDR, CASB, SIEM, DLP, CNAPP, password vaults, DevSecOps solutions, among others;
Deep understanding of security technologies: firewalls, IDS/IPS, SIEM, DLP, EDR, Web Filtering, Cloud Security, API Security and encryption;
Skill with threat modeling and frameworks such as OWASP;
Experience in incident management and technical response;
Industry certifications (e.g., CISSP, CCSP, CEH, AZ-500, SC-200, ISO 27001) are a plus;
Strong analytical skills, clear communication, organization, and problem-solving abilities;
Ability to work in multidisciplinary environments with a collaborative attitude and delivery focus.
Benefits
Medical Assistance;
Dental Assistance (Omint);
Life Insurance;
Profit Sharing (PLR);
PPR (performance-based profit sharing);
"ABC with You": a program that supports employees and their families with legal, social, psychological and financial assistance;
Meal Voucher;
Grocery Voucher;
Extended parental leave: 20 days paternity and 6 months maternity;
Childcare/Babysitting Assistance;
Annual Day Off;
Home Office Allowance;
Home Office Infrastructure Allowance;
TotalPass;
Job title
Senior Information Security Analyst – Architecture, Cloud Security
Administrative Business Partner supporting leaders within Security function at Palantir Technologies. Managing diverse responsibilities to enhance productivity and support leadership teams.
Administrative Business Partner supporting leadership within Palantir’s Security function. Providing comprehensive administrative support while handling confidential matters in a fast - paced environment.
Providing security consultancy to technical and business stakeholders at Trendyol Tech. Driving improvements in security practices while assessing new projects and establishing security standards.
Entra ID Security Specialist developing identity and access management solutions focused on Microsoft Entra ID at cyberunity AG. Responsible for strategic development and compliance in security architecture.
Red Team Security Engineer at Xcel Energy performing authorized testing to expose security weaknesses. Collaborating with internal teams and external vendors for effective security technology implementation.
Manager I overseeing Cyber Security engineering functions at NFCU. Leading and supporting the Cybersecurity Technology Engineering team in implementing security protocols.
Security Officer responsible for maintaining safety and security at Hilton in Harrisburg, PA. Conducting patrols, responding to emergencies, and supervising housekeeping staff.
Information Security Engineer managing incident detection and response for Safe - Guard Products. Involves vulnerability management, data protection, and security engineering activities.
Work Student, Product Security at TeamViewer supporting security initiatives for product safety. Opportunity to gain hands - on experience in an international environment with a focus on cybersecurity.
Cyber Security Detection Engineer focusing on threat detection capabilities and security telemetry within complex environments. Collaborating across Security Operations, Cloud Engineering, and Compliance disciplines.