Analista de Segurança Cibernética | Foco em EDR, SIEM e Resposta a Incidente in Brazil at Jobgether

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Analista de Segurança Cibernética | Foco em EDR, SIEM e Resposta a Incidente based in Brazil.

In this role, you will play a key part in protecting information systems, digital assets, and technology infrastructure against evolving cybersecurity threats. You will monitor security environments, investigate suspicious activities, identify vulnerabilities, and coordinate incident response efforts. Working closely with IT, monitoring, and support teams, you will help strengthen security controls and improve the organization's overall cybersecurity posture. You will also contribute to risk management, compliance, audits, and the continuous improvement of security processes. This position offers the opportunity to work with industry-standard security frameworks and technologies in a collaborative, innovation-driven environment. The role is open to professionals with disabilities and offers remote or hybrid work arrangements.

• Monitor security consoles and tools, analyzing alerts, identifying suspicious activities, and supporting the detection and investigation of potential threats.

• Work closely with monitoring and user support teams to address information security requirements and ensure appropriate security practices across the organization.

• Manage information security and privacy changes, risks, and incidents, coordinating investigation, response, and resolution activities.

• Identify security gaps and vulnerabilities, assess potential risks, and recommend corrective actions to strengthen the organization's security posture.

• Operate and monitor cybersecurity solutions, particularly Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and vulnerability management tools.

• Investigate security alerts, coordinate incident response activities, and engage relevant technical teams to ensure timely resolution.

• Support internal and external security audits, following up on findings and ensuring compliance with established security requirements.

• Map, review, and continuously improve security processes, identifying opportunities to enhance operational efficiency and risk management.

• Develop, review, and maintain information security policies, procedures, standards, and guidelines.

• Implement and promote cybersecurity best practices aligned with recognized industry frameworks and standards.

• Encourage a strong information security culture through awareness initiatives, training sessions, workshops, and employee education.

• Collaborate with different departments and business units to integrate security requirements into organizational processes.

• Maintain effective communication with internal teams, coordinate support requests, and escalate incidents when necessary.

• Bachelor's degree completed or currently in progress in Information Technology, Cybersecurity, Information Security, or a related field.

• Knowledge of recognized information security frameworks and standards, including ISO 27001, ISO 27002, NIST, MITRE ATT&CK, and CIS Controls.

• Understanding of cybersecurity incident identification, investigation, management, and response processes.

• Practical knowledge of EDR, SIEM, and vulnerability management solutions, including security monitoring and alert analysis.

• Familiarity with Windows and Linux operating systems, as well as container environments.

• Understanding of information security principles, vulnerability management, risk assessment, and security controls.

• Ability to analyze security events, identify potential threats, and support incident resolution and remediation.

• Strong adaptability and flexibility when working with evolving business requirements, people, and processes.

• Innovative mindset, proactive problem-solving abilities, and interest in continuously improving cybersecurity practices.

• Good communication and collaboration skills, with the ability to work effectively alongside technical teams and other business areas.

• Nice to have: Relevant professional certifications in information security or cybersecurity.

• Comprehensive health insurance.

• Dental care coverage.

• Pharmacy partnerships and discounts.

• Life insurance.

• Transportation allowance.

• Food allowance.

• Educational assistance.

• Complimentary internet service.

• School supplies assistance.

• Maternity support allowance.

• Profit-sharing program (PPR).

• Long-service recognition and rewards.

• Psychological support and well-being services.

• Childcare assistance.

• Additional support for employees with children with disabilities.

• Birthday gift.

• Uniforms and work equipment provided.

• Exclusive partnerships and discounts.

• Discounts on company services.

• Remote or hybrid work possibilities, with an on-site option in Timbó, Santa Catarina.

• Working schedule: Monday to Friday, from 8:00 AM to 12:00 PM and 1:12 PM to 6:00 PM.

• Inclusive workplace with opportunities open to professionals with disabilities.