Grupo BAUMINAS

Information Security Analyst, Mid-level

Grupo BAUMINAS

full-time

Posted on:

Location Type: Hybrid

Location: CampinasBrazil

Visit company website

Explore more

AI Apply
Apply

About the role

  • Monitor and analyze security events from tools such as SIEM, EDR, XDR and corporate antivirus
  • Perform security incident analysis and response, including investigation, containment and lessons learned
  • Support the operation and review of technical and administrative security controls
  • Conduct and support vulnerability assessments and follow up on remediation plans
  • Support information security risk management processes, including identification, assessment and treatment of risks
  • Contribute to GRC activities, such as:
  • Support the maintenance of Information Security policies, standards and procedures
  • Assist internal and external audits by providing technical evidence
  • Follow up on action plans and non-conformities
  • Support initiatives related to compliance with standards and frameworks (ISO 27001, NIST, LGPD, CIS Controls)
  • Assist with identity and access management (IAM) processes and periodic privilege reviews
  • Prepare technical reports, security metrics and process documentation
  • Promote Information Security culture and awareness

Requirements

  • Previous experience as an Information Security Analyst or in a similar role
  • Knowledge of: Cybersecurity fundamentals, networks and operating systems (Windows and Linux)
  • Log and security event analysis
  • Experience with SIEM and EDR/XDR tools
  • Knowledge of vulnerabilities, CVEs and system hardening
  • Concepts of Risk Management, Compliance and Security Controls
  • Basic to intermediate knowledge of standards and frameworks such as ISO 27001, NIST and LGPD
  • Certifications are a plus
Benefits
  • Position also open to candidates with disabilities (PWD)
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
security incident analysisvulnerability assessmentsrisk managementlog analysissystem hardeningsecurity metricstechnical report preparationincident responseidentity and access managementcompliance standards
Soft Skills
analytical skillscommunicationteam collaborationproblem-solvingattention to detailorganizational skillsadaptabilitycritical thinkingtime managementinterpersonal skills