Portobello Shop

Security Engineer

• Technical owner for the information security operations platform, responsible for the architecture, strategy, and sustaining controls for detection, incident response, vulnerability management, identity management, and perimeter governance.
• Primary technical reference for the area, contributing to process maturity and the technical development of the team.
• Architect, deploy, and direct the maintenance of an open-source-based SIEM platform, including data collection, normalization, event correlation, processing pipelines, and retention policies.
• Develop and maintain detection use cases aligned with the MITRE ATT&CK framework, with continuous tuning to reduce false positives and increase detection effectiveness.
• Strategically lead the corporate Vulnerability Management program, including risk-based prioritization, coordination of remediation with technology teams, and monitoring executive-level indicators.
• Define and govern Identity and Access Management (IAM) processes: identity lifecycle, segregation of duties, RBAC, MFA, and periodic access reviews.
• Govern policies and rules for Next-Generation Firewalls (NGFW): network segmentation, periodic rule reviews, and hardening.
• Provide technical leadership for response to critical security incidents, supporting containment, forensic analysis, and coordination of remediation activities.
• Implement and monitor hardening of environments based on recognized industry benchmarks (CIS Benchmarks).
• Develop automations and integrations using tools and scripting languages to optimize team operations.
• Prepare and maintain high-complexity technical documentation, standard operating procedures, security policies, and reference architectures.
• Act as a mentor to team analysts, promoting knowledge transfer, technical culture, and operational continuity.

Information Security Specialist

Security Analyst

• Operate Information Security controls focused on the Vulnerability Management lifecycle and the operation of Identity and Access Management (IAM), working collaboratively on monitoring, triage, and initial incident response across the company.
• Execute the Vulnerability Management lifecycle: analyze scan results, perform risk-based prioritization, and coordinate and follow up on remediation with the responsible teams (Infrastructure, Systems, etc.).
• Maintain, update, and improve operational metrics and remediation workbooks (agent coverage, severity, SLA tracking for fixes).
• Operate Identity and Access Management (IAM) processes: provisioning, deprovisioning, privilege granting, periodic access reviews, and support for MFA mechanisms.
• Actively support corporate access review campaigns and validation of segregation of duties (SoD).
• Monitor, classify, and investigate alerts generated by security tools within your scope.
• Perform triage and initial analysis of security incidents, executing structured escalation to a Specialist when necessary.
• Produce periodic operational reports and security indicators for your area of responsibility.
• Create and keep technical documentation and standard operating procedures (SOPs) up to date.

Information Security Analyst (Mid-level) – Vulnerability and Identity Management

• Operar e apoiar a sustentação da plataforma SIEM, garantindo a correta coleta das fontes de logs, integridade e qualidade dos dados recebidos.
• Apoiar a criação, revisão e ajuste fino (tuning) de regras e casos de uso de detecção, visando a redução de falsos positivos e otimização dos alertas.
• Operar e administrar Firewalls de Próxima Geração (NGFW): implementação controlada de regras de acesso, NAT, VPNs, documentação de justificativas e revisão periódica de regras órfãs.
• Apoiar ativamente as atividades de segmentação de rede, regras de tráfego e hardening de perímetro.
• Monitorar, classificar e investigar alertas de segurança gerados pelo SIEM, firewalls e demais ferramentas perimetrais.
• Realizar a triagem e análise inicial de incidentes de segurança perimetral, efetuando o escalonamento estruturado para o Especialista quando necessário.
• Produzir relatórios operacionais, mapas de tráfego e indicadores de incidentes/bloqueios de segurança.
• Elaborar e manter atualizada a documentação técnica de topologias, fluxos de redes e procedimentos operacionais (POPs).

Information Security Specialist

Information Security Analyst (Mid-level) – Vulnerability and Identity Management

Analista de Segurança da Informação Pleno – Detecção, SIEM, Perímetro, NGFW