Analista de Segurança Cibernética | Foco em EDR, SIEM e Resposta a Incidente

Accountabilities:: Monitor security consoles and tools, analyzing alerts, identifying suspicious activities, and supporting the detection and investigation of potential threats. Work closely with monitoring and user support teams to address information security requirements and ensure appropriate security practices across the organization. Manage information security and privacy changes, risks, and incidents, coordinating investigation, response, and resolution activities. Identify security gaps and vulnerabilities, assess potential risks, and recommend corrective actions to strengthen the organization's security posture. Operate and monitor cybersecurity solutions, particularly Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and vulnerability management tools. Investigate security alerts, coordinate incident response activities, and engage relevant technical teams to ensure timely resolution. Support internal and external security audits, following up on findings and ensuring compliance with established security requirements. Map, review, and continuously improve security processes, identifying opportunities to enhance operational efficiency and risk management. Develop, review, and maintain information security policies, procedures, standards, and guidelines. Implement and promote cybersecurity best practices aligned with recognized industry frameworks and standards. Encourage a strong information security culture through awareness initiatives, training sessions, workshops, and employee education. Collaborate with different departments and business units to integrate security requirements into organizational processes. Maintain effective communication with internal teams, coordinate support requests, and escalate incidents when necessary. Requirements: Bachelor's degree completed or currently in progress in Information Technology, Cybersecurity, Information Security, or a related field. Knowledge of recognized information security frameworks and standards, including ISO 27001, ISO 27002, NIST, MITRE ATT&CK, and CIS Controls. Understanding of cybersecurity incident identification, investigation, management, and response processes. Practical knowledge of EDR, SIEM, and vulnerability management solutions, including security monitoring and alert analysis. Familiarity with Windows and Linux operating systems, as well as container environments. Understanding of information security principles, vulnerability management, risk assessment, and security controls. Ability to analyze security events, identify potential threats, and support incident resolution and remediation. Strong adaptability and flexibility when working with evolving business requirements, people, and processes. Innovative mindset, proactive problem-solving abilities, and interest in continuously improving cybersecurity practices. Good communication and collaboration skills, with the ability to work effectively alongside technical teams and other business areas. Nice to have: Relevant professional certifications in information security or cybersecurity. Benefits: Comprehensive health insurance. Dental care coverage. Pharmacy partnerships and discounts. Life insurance. Transportation allowance. Food allowance. Educational assistance. Complimentary internet service. School supplies assistance. Maternity support allowance. Profit-sharing program (PPR). Long-service recognition and rewards. Psychological support and well-being services. Childcare assistance. Additional support for employees with children with disabilities. Birthday gift. Uniforms and work equipment provided. Exclusive partnerships and discounts. Discounts on company services. Remote or hybrid work possibilities, with an on-site option in Timbó, Santa Catarina. Working schedule: Monday to Friday, from 8:00 AM to 12:00 PM and 1:12 PM to 6:00 PM. Inclusive workplace with opportunities open to professionals with disabilities.