Hybrid Senior Information Security Analyst

at Omni Conectado

• Job title: Senior Information Security Analyst
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Cloud, DNS, Linux, Oracle
• Location requirements: Hybrid, Sao Paulo, Brazil

About the role

• Senior Information Security Analyst responsible for protecting Omni's technology environment. Focus areas: Monitoring, Defense, Operations across on-premises, cloud, and endpoints.

Responsibilities

• You will be responsible for ensuring the security of Omni's technology environment, based on industry best practices, complying with financial market regulators and our policies, guidelines, and standards.
• Here you will be challenged to propose new solutions and ways of doing things, optimize the use of existing tools while ensuring compliance with frameworks and policies, and continuously monitor and improve the environment's security.
• Our team is responsible for the entire security operation, deploying and managing technical solutions to ensure the cybersecurity of the environment — on-premises, cloud, and workstations.
• Our pillars are focused on Monitoring, Defense, and Operations.
• You will join a collaborative, multidisciplinary team. The IT Operations superintendent area is composed of areas such as Technical Support, Infrastructure, Change Management, and Core Banking. You will act as the security reference for all these areas, playing a key role in the development and execution of projects and assisting with technical security definitions from a technical perspective.
• **Responsibilities and duties**:
• 1) Propose and independently execute Cybersecurity projects;
• 2) Serve as a technical support/escalation point for other analysts in the team;
• 3) Review, document, and adapt team processes;
• 4) Understand and carry out new activities proposed by internal areas and partners;
• 5) Manage patches and vulnerabilities across the environment;
• 6) Develop new features and automations within the Security environment;
• 7) Act as the responsible analyst on projects, defining deliverables;
• 8) Proactively anticipate and mitigate potential security issues in the Omni environment;
• 9) Support other Technology areas in understanding and resolving ongoing issues;
• 10) Monitor the security of Omni's technology environment;
• 11) Act as Level 2 (N2) support for SOC (Security Operations Center) requests;
• 12) Identify and resolve cybersecurity issues;
• 13) Respond to requests submitted by employees and business partners via management tools (SS);
• 14) Escalate and assemble Level 2 (N2) or Level 3 (N3) analysts to resolve security-related incidents;
• 15) Install, administer, and maintain cybersecurity services.

Requirements

• **Skills and behaviors**
• 1) Self-management
• 2) Interpersonal skills
• 3) Sense of urgency
• 4) Critical business insight
• 5) Process-oriented mindset
• 6) Execution of project activities
• 7) Autonomy in leading project activities
• 8) Proactivity
• 9) Creativity in problem solving
• 10) Communication
• **Technical knowledge**
• 1. Management of Fortinet Firewalls, AWS Security Groups and other cloud providers;
• 2. Knowledge of WAF (Web Application Firewall) tools — Cloudflare is desirable;
• 3. Knowledge of SOC (Security Operations Center) routines and procedures;
• 4. Knowledge of patch and vulnerability management processes;
• 5. Desirable: knowledge of ITIL and COBIT, Kanban and project management;
• 6. Desirable knowledge of CSPM (Cloud Security Posture Management) tools;
• 7. Knowledge of cloud platforms: AWS, Azure and OCI;
• 8. Cloud security;
• 9. Security documentation (PRDs, Playbooks, Runbooks);
• 10. Knowledge of Windows Server and Linux operating systems;
• 11. Knowledge of general network services;
• 12. Hardening of Windows and Linux operating systems;
• 13. Knowledge of installing operating systems: Windows Server and Linux (Debian, Ubuntu, CentOS, Oracle Linux);
• 14. Knowledge of L2 network devices;
• 15. Knowledge of L3 networks (IP, protocols, OSI model, routing);
• 16. Network troubleshooting (IP, DNS, subnetting, connectivity, etc.);
• 17. General understanding of electrical installations (voltage, current, electrical panels, circuit breakers, outlets).

Benefits

• 👶 Childcare allowance for children up to 6 years and 11 months
• 🏋️ TotalPass for physical health and wellness
• 🏠 Hybrid model 3x2 (remote and on-site)
• 🍴 Meal and food allowance via flexible card
• 🚌 Transportation allowance
• 🩺 Medical and dental insurance (SulAmérica, private plan)
• 🛡️ Life insurance
• 🏃 Wellness program (running and more)
• 🎂 Birthday day off
• 💻 Conexa Saúde — online consultations with no copayment
• 💰 Profit sharing
• 👕 No dress code — be yourself!
• ⏰ Flexible working hours
• 🎓 Corporate University (learning and development)
• ✨ And much more for you!