LUMIS

Human Resources

• Post job openings on various platforms;
• Screen and source candidates (headhunting);
• Schedule and conduct interviews;
• Support hiring processes with HR/Payroll (Personnel Department);
• Conduct onboarding for new employees;
• Participate in organizing internal events and employee engagement initiatives;
• Support intranet updates;
• Maintain internal HR records and controls;
• Contribute ideas for internal actions and initiatives.

HR Intern

Security Engineer

• Assess risks in systems, cloud environments, internal processes and new projects;
• Conduct continuous security assessments of infrastructure and applications;
• Propose and follow up on action plans to improve security maturity;
• Ensure compliance with LGPD, ISO/IEC 27001 and other applicable frameworks;
• Develop and maintain Information Security policies, standards and procedures;
• Support business continuity and disaster recovery initiatives;
• Prepare reports and provide evidence for audits and compliance assessments;
• Support the implementation and evolution of security tools such as SIEM, WAF, IDS/IPS, EDR, DLP and vulnerability management solutions;
• Establish monitoring, detection and incident response processes;
• Coordinate security investigations and simulation exercises;
• Ensure security best practices in cloud environments (AWS and OCI), including access management, encryption, backups and automations;
• Collaborate with Engineering and DevOps teams to implement DevSecOps practices and security in CI/CD pipelines;
• Define security and privacy-by-design standards for products and infrastructure;
• Manage IAM-related controls, including MFA, SSO, RBAC and periodic access reviews;
• Ensure traceability, segregation of duties and privileged access governance;
• Support the adoption and governance of PAM/password vault solutions;
• Participate in defining security requirements for SaaS/PaaS products;
• Perform application vulnerability analysis using SAST, DAST and interpret pentest results;
• Promote secure development practices and share references such as the OWASP Top 10 with technical teams;
• Conduct security training and awareness initiatives;
• Act as a technical authority for different areas of the company;
• Define a security roadmap aligned with business strategy;
• Support architecture decisions, risk prioritization and security investments;
• Serve as the technical focal point for audits, RFPs and security questionnaires;
• Support commercial, customer service and pre-sales teams in communicating the company’s security practices.

HR Intern

Security Tech Lead