Mid-Level Information Security Analyst

Posted 8hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Analista de Segurança da Informação atuando com SOC, incidentes, acessos e vulnerabilidades. Proteção operacional da plataforma de relacionamento com clientes da Dito.

Responsibilities:

  • Serve as the focal point for the partner SOC, handling escalations and conducting triage and containment of incidents requiring internal action
  • Provide context to the SOC to improve rules, reduce false positives, and enhance playbooks
  • Administer the EDR and other security tools, including policies, exclusions, agent health, and detection analysis
  • Manage access operations, including onboarding, offboarding, role changes, and periodic reviews
  • Handle email and endpoint security, including phishing analysis, quarantines, blocking, and protection settings
  • Lead vulnerability management, including scans, risk-based prioritization, and remediation tracking with the responsible teams
  • Document incidents and turn recurring cases into runbooks
  • Work during business hours, with occasional after-hours call-ins for cases escalated by the SOC

Requirements:

  • Hands-on experience with incident triage and containment in a corporate environment
  • Experience administering a leading EDR solution
  • Experience with access management, including SSO, MFA, employee onboarding and offboarding processes, and access reviews
  • Experience with vulnerability management and risk-based prioritization
  • Phishing analysis and knowledge of SPF, DKIM, and DMARC
  • Ability to read and query identity, endpoint, and cloud logs
  • Strong fundamentals in networking and operating systems (Windows, Linux, and macOS)
  • Preferred: experience working with an outsourced SOC or MSSP
  • Preferred: scripting experience in Python, PowerShell, or Bash
  • Preferred: experience with audit logs and IAM in GCP or AWS
  • Preferred: experience with MDM, workstation hardening, and DLP
  • Preferred: knowledge of MITRE ATT&CK
  • Preferred: certifications such as Security+, CySA+, BTL1, SC-200, or GCIH

Benefits:

  • Dito Flex — flexible meal and food allowances paid via the Caju card; choose how to use your balance based on your needs and preferences
  • Bradesco medical and dental insurance with nationwide coverage, no copayments, and dependent coverage for children and spouses
  • Wellhub (formerly Gympass), with a variety of plans, including a free option
  • Home office allowance to help cover some of the expenses associated with remote work
  • Partnership with Sesc, offering discounts on education, healthcare, culture, sports, tourism, leisure, and assistance services
  • Extended maternity and paternity leave, also applicable to adoption and legal custody cases; meal and food allowances continue during this period
  • 40-hour workweek with genuinely flexible hours
  • Complete freedom of personal style, with no dress code
  • Numerous learning opportunities, including events, talks and meetups, an internal library, and more
  • Complimentary snacks, games, and arcade games at the office
  • Partnerships and discounts at restaurants, gyms, educational institutions, language schools, and more
  • Regular social gatherings and team integration events
  • Internal diversity committees with events, discussions, learning opportunities, and awareness and inclusion initiatives