Cyber Security Specialist

Onfly

Cyber Security Specialist at Onfly executing and evolving information security controls. Collaborating with engineering teams in a cloud-native environment and handling SOC operations.

Posted 7/24/2026full-timeBelo Horizonte • 🇧🇷 BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Operations Center (SOC) routines, vulnerability management, and compliance with ISO 27001, PCI DSS, and LGPD. Proficient in integrating security practices within DevSecOps and cloud environments, particularly AWS.

Highest-signal resume keywords

SOC OperationsISO 27001 CompliancePCI DSS FamiliarityDevSecOps IntegrationCloud Security (AWS)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseVulnerability ManagementAlert TriageThreat MonitoringSecurity Best PracticesPentestingBug Bounty ProgramISMS ControlsData ProtectionRisk Reporting

Soft Skills

Communication of Technical RisksCollaboration with Engineering Teams

Tools & Technologies

SIEMEDRVulnerability ScannersIAMPAMAWSECSMicroservices

Industry Keywords

LGPDData Incident ResponseCompliance AssessmentAudit EvidenceContinuous Monitoring

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Operate SOC (Security Operations Center) routines, including continuous monitoring, alert triage, detection and incident response;
Perform vulnerability management, including scans, prioritization, remediation tracking and residual risk reporting;
Support the implementation and maintenance of ISO 27001, executing ISMS controls and providing audit evidence;
Support PCI DSS compliance, participating in assessments, scoping and remediation of non-conformities;
Support LGPD compliance, mapping privacy risks and collaborating on data incident responses;
Work with DevSecOps practices, integrating security into the development lifecycle (CI/CD) in AWS/ECS/microservices environments;
Execute and monitor the pentest and bug bounty program, validating fixes and reporting risks;
Administer security tools (SIEM, EDR, vulnerability scanners) and support identity and access management (IAM/PAM);
Collaborate with Engineering and Product teams day-to-day, advising on security best practices within projects and squads.

Requirements

What you’ll need

Previous experience in SOC operations, including alert triage, incident response and threat monitoring;
Knowledge of ISO 27001 and participation in certification or audit processes;
Familiarity with PCI DSS and its main compliance requirements;
Experience with security in cloud environments (preferably AWS), including IAM, networking, encryption and detection tools (SIEM);
Ability to communicate technical risks clearly to Engineering and Product teams;
Knowledge of LGPD and data protection best practices;
Experience with DevSecOps and integrating security into CI/CD pipelines;
Degree in Computer Science, Information Systems, Engineering or related fields;

Benefits

Comp & perks

Hybrid work model (2 days per week on-site and the remainder remote);
Flexible working hours;
Meal allowance on a flexible card R$40 (no 6% deduction);
Transportation allowance on a flexible card (no 6% deduction);
Unimed health plan, no copayment and no monthly fee for the Onflyer (covered by the company);
Dental plan (discount on monthly fee);
Pharmacy discounts;
Online psychotherapy benefit (Vittude);
Gym benefits (Gympass);
90% scholarship for language courses;
Budget of up to R$1,000 annually for training/certifications in your area of expertise;
Discounts on undergraduate and postgraduate programs (UNA and UNIBH);
Funeral assistance (Grupo Zelo);
Extended maternity/paternity leave;
R$200 voucher on Onhappy (exclusive platform for discounted travel anywhere in Brazil);
Life insurance.