Security Engineer

• Garantir a gestão integrada de Saúde e Segurança do Trabalho e Medicina Ocupacional, promovendo ambientes seguros, conformidade legal e cultura preventiva em toda a operação (matriz, lojas e centros de distribuição), com atuação estratégica e alta capilaridade.
• Responsável pela coordenação do time de Saúde e Segurança do Trabalho (SESMT)
• Atuação estratégica e operacional na matriz, lojas e Centros de Distribuição
• Gestão dos programas legais de SST, garantindo conformidade com a legislação vigente
• Suporte técnico às lideranças das lojas e CDs em temas de saúde, segurança e prevenção de riscos
• Acompanhamento de indicadores, planos de ação e auditorias internas de SST
• Interface com áreas corporativas, operações e parceiros externos
• Liderança, desenvolvimento e organização da rotina do time de saúde e segurança
• Condução e acompanhamento da aplicação do Questionário da NR-01 (PGR/GRO), apoiando o mapeamento de riscos e planos preventivos

Coordenador Segurança e Medicina do Trabalho – SESMT

• Manage enterprise firewalls, including Cisco Meraki, SonicWall, and Fortinet .
• Monitor and respond to security alerts using XDR, RMM, and SIEM platforms.
• Lead incident response , breach remediation, and root-cause analysis .
• Administer Bitdefender Endpoint Protection and similar endpoint security tools.
• Secure the Microsoft 365 tenant , including Defender, identity protection, and conditional access policies.
• Support SOC 2 and ISO 27002 compliance activities.
• Collaborate with internal teams to support telecom-specific applications and integrations .
• Monitor system performance, troubleshoot issues, and provide timely resolutions to minimize downtime.
• Ensure compliance with telecom industry standards , data protection regulations, and company policies.
• Create and maintain documentation for system configurations, processes, and troubleshooting guides .
• Perform Windows Server and Linux administration .
• Manage user accounts, access permissions, and IT resources across enterprise systems.
• Support and maintain virtualization platforms (VMware and Hyper-V).
• Perform networking fundamentals and troubleshooting .
• Provide technical support to end users, ensuring effective communication and timely resolution of IT-related concerns.
• Research and recommend technology upgrades or enhancements to optimize IT operations.
• Stay current with the latest IT trends and best practices relevant to the telecom sector.

IT Security Systems Administrator – Telecom

• Technically lead the implementation of the guidelines of the Information and Cybersecurity Master Plan, the Technology Services and Information and Cybersecurity Management Policy, and other related policies across the Company's infrastructure
• Design, deploy, configure, tune and monitor network and cloud security tools, including but not limited to firewalls, IPS/IDS, EDR (Endpoint Detection and Response), WAF, encryption solutions and Data Loss Prevention (DLP) systems
• Configure and administer the Identity and Access Management (IAM) architecture, ensuring enforcement of the principle of least privilege, segregation of duties and the requirement for Multi-Factor Authentication (MFA) across all corporate systems
• Translate the steps of the Cyber Incident Response Plan into practice by defining and documenting the technical workflows for triage, containment, eradication and recovery
• Develop and deliver information security and data protection training and simulated phishing campaigns for N5X employees and third parties
• Collaborate with other directorates on the implementation of N5X policies and standards, for example supporting the Directorate of Operations and Risk in structuring and conducting inaugural tests (failover and recovery tests) of the Business Continuity Plan (BCP) and the Disaster Recovery Plan (DRP)
• Proactively monitor technology environments to identify threats, vulnerabilities and anomalous behavior
• Participate in detection, containment, mitigation, response and recovery procedures for cyber incidents (e.g., ransomware, DDoS attacks and phishing), coordinating post‑incident reviews (post‑mortems) and post‑incident reports
• Coordinate and support the execution of penetration tests (pentests), systemic vulnerability scans and disaster recovery tests
• Support the assessment, due diligence and continuous monitoring of security controls implemented by critical vendors, third‑party services and multi‑cloud environments

Information Security Specialist – Cybersecurity

• Coordinate Security Operations Center (SOC) operations, ensuring continuous monitoring, rapid response and alignment with the company’s security policies;
• Assess and optimize incident response processes, implementing automation, playbooks and metrics to increase efficiency and reduce response times;
• Perform detailed incident analyses, identifying root causes, impacts and recommending corrective and preventive measures;
• Manage SIEM, SOAR and other monitoring tools, ensuring integration and effectiveness in threat detection;
• Collaborate with cyber defense, GRC, IAM and infrastructure teams to coordinate actions during incidents and improve overall security posture;
• Prepare technical and executive reports on incidents, trends and improvements implemented;
• Train SOC analysts and other stakeholders on incident response best practices and tool usage;
• Stay up to date on new attack techniques, response frameworks (e.g., NIST, MITRE ATT&CK) and industry trends.

Cybersecurity Specialist – Incident Response

• Support safe execution of Field Service activities at customer sites
• Conduct site inspections, risk assessments, and safety observations
• Ensure compliance with HSE standards and legal requirements
• Deliver toolbox talks, inductions, and safety training sessions
• Investigate incidents and support corrective action implementation
• Monitor PPE compliance and critical risk control measures
• Maintain HSE documentation, permits, and safety records
• Collaborate with operations, contractors, and customer HSE teams

Técnico em Segurança do Trabalho

• Operate Vulnerability Management platforms (CrowdStrike Falcon Spotlight and/or Tenable.io / Tenable.sc), including configuring scans, policies, and executive dashboards
• Conduct risk analysis based on CVSS, EPSS and threat intelligence to prioritize critical vulnerabilities
• Support IT and infrastructure teams in executing remediation and mitigation plans (patch management, hardening, workarounds)
• Create and maintain SLA reports, exposure metrics, and indicators for technical and executive stakeholders
• Integrate vulnerability data with SIEM/SOAR and ITSM tools (ServiceNow, Jira) for remediation tracking
• Participate in governance meetings, security committees, and interactions with compliance and audit teams
• Correlate vulnerabilities with frameworks such as MITRE ATT&CK, CIS Controls, and NIST CSF 2.0

Senior Cybersecurity Analyst – Blue Team, Vulnerability Management

• Perform validation of employee documentation in the system, ensuring all safety-related documents required by standards are up to date and compliant;
• Review and validate essential documents such as PCMSO (Occupational Health Medical Control Program), Risk Management Programs, certification of Regulatory Standards (NRs) and ASOs (Occupational Health Certificates), ensuring compliance with legal and regulatory requirements;
• Support and assist internal and external clients, resolving questions related to occupational safety documentation and providing guidance on required procedures;
• Manage and organize safety documentation, maintaining accurate and accessible records for future audits and inspections;
• Prepare reports on the compliance status of safety documents, identifying nonconformities and proposing corrective actions when necessary;
• Coordinate with other departments to ensure all occupational safety processes are executed efficiently and within required timelines.

Administrative Analyst – Occupational Safety (Junior)

• Administer and maintain Linux environments (installation, configuration, updates, and troubleshooting)
• Manage services and resources in Azure Cloud (virtual machines, networking, storage, and permissions)
• Administer Active Directory, including:
• Users and groups
• Security policies (GPO)
• Access control and permissions
• Support administration and operation of databases (e.g., SQL Server, MySQL or PostgreSQL), focusing on:
• Availability
• Performance
• Backup and restore routines
• Monitor environments and services, performing incident analysis and resolution
• Support information security initiatives, access control, and operational best practices
• Document technical procedures and environments
• Work collaboratively with development and support teams
• Support maintenance and configuration of NGINX and RabbitMQ

Infrastructure and Security Analyst – Mid-level

• Design, implement and improve IQVIA cybersecurity systems
• Configure, troubleshoot and maintain security infrastructure
• Evaluate tools, develop use cases, and document effectiveness of new tools and technologies to meet those use cases
• Engage and work with vendors on projects and current security controls improvement
• Initiate, execute and complete project plans
• Document and maintain designs for security controls
• Keep abreast with current security threats, trends and controls

Cybersecurity Engineer

• Act as the technical Cyber Security specialist for OT/ICS environments, supporting high-criticality industrial operations across different companies within the Cosan Group;
• Lead initiatives to expand OT security monitoring, including onboarding new plants, industrial networks, critical assets, and operational technologies into the monitoring ecosystem;
• Develop and refine detection use cases for industrial environments, using OT monitoring platforms, SIEM, EDR and specialized threat detection solutions;
• Perform industrial network architecture analyses, evaluating segmentation, zones and conduits, communication flows, and adherence to security best practices for ICS environments;
• Participate in defining and reviewing secure architectures for new industrial projects, operational expansions, and OT digital transformation initiatives;
• Support identification, analysis and assessment of cyber threats, vulnerabilities and exposures in industrial environments, proposing prioritized mitigation plans based on risk;
• Work with Engineering, Automation, Network and Operations teams to implement security controls for OT environments;
• Provide technical support for the cyber incident response process involving industrial systems, contributing root cause analysis, containment and corrective actions;
• Conduct technical assessments of maturity, hardening, industrial network segmentation and compliance with market frameworks and standards;
• Manage vendors and partners specialized in OT security, ensuring technical quality, governance and continuous evolution of contracted services;
• Prepare executive reports and presentations for different organizational levels, communicating risks, metrics, progress and investment needs;
• Support the definition of the Group's OT Cyber Security strategy, contributing to the advancement of industrial security maturity.

Industrial OT Security Specialist – Operational Technology

• Work in the Information Security area
• Implement, enhance, and maintain information security controls
• Work with security in cloud environments (Azure, SaaS, and hybrid)
• Lead end-to-end security projects (design, implementation, and handover)
• Define and evolve secure cloud architectures
• Monitor metrics and industry best practices (CIS Controls, providers)

Senior Analyst – Information Security, Cloud

• Lead GRC automation: Transform compliance requirements and policies into automated controls (Compliance as Code), reducing reliance on manual evidence collection.
• Implement AI in governance: Explore and apply AI solutions to optimize GRC processes, such as risk analysis, vulnerability mapping, and responses to security questionnaires.
• Develop and maintain technical controls: Work closely with Engineering teams to ensure frameworks such as ISO 27001, NIST, and SOC 2 are implemented via automation in the CI/CD pipeline.
• Manage risks with a data-driven approach: Conduct security risk assessments using real data and telemetry, moving beyond subjective analysis.
• Build automated indicators: Create technical and operational security dashboards that reflect compliance in real time, using APIs and data tools.
• Technical interface with audit: Orchestrate internal and external audit deliverables through systematized processes, ensuring findings/non-conformities are treated as technical debt.
• Support Privacy and Business: Act as a technical consultant to Privacy and Business areas, ensuring new projects and vendors incorporate security controls by design.

Senior Security Engineer – GRC

• Create and tune detection content, including correlation rules, use cases, queries, and alerts, aligned with operational needs and the threat landscape
• Support Threat Hunting activities, aiming to identify suspicious behavior, indicators of compromise (IoCs), and opportunities to improve detection capabilities in monitored environments
• Assist in creating playbooks, participate in client meetings, develop use cases, analyze EPS or GB/day consumption, evaluate environments, and support the implementation of security and monitoring best practices.

Security Analyst, Threat Hunting

• Research, design and implement AI-based cybersecurity solutions (such as local Machine Learning/Deep Learning models) for threat detection and vulnerability mitigation in Android systems;
• Contribute to architectural design and develop new complex features and improvements for mobile development projects;
• Actively participate in the development of Android applications and services, with a focus on framework-level and embedded Android;
• Promote and ensure best practices related to coding, software architecture, information security and data engineering;
• Maintain strict technical alignment with domestic and international stakeholders.

Senior Software Developer – AI for Mobile Security

• Operate the firewall request workflow using the AlgoSec platform;
• Analyze, validate, and track requests for creation, modification, and removal of firewall rules;
• Assess technical impacts related to connectivity, security, and compliance;
• Support the review, recertification, and governance processes for security policies;
• Perform operational troubleshooting for security and connectivity solutions;
• Monitor approval flows, documentation, and compliance of changes;
• Interact with network, infrastructure, security, architecture teams and vendors;
• Support monitoring and handling of incidents related to connectivity, access, and security;
• Maintain up-to-date technical documentation, operational procedures, and records;
• Support audits and compliance processes related to firewall rules and security policies;
• Contribute to continuous improvement of operational processes, controls, and automations.

Information Security Support Analyst – Mid-level

• Planejar e executar as frentes estratégicas e táticas das marcas sob sua gestão, definindo diretrizes de produto e garantindo sua implementação ao longo de todo o ciclo de vida.
• Atuar como responsável estratégico pelo relacionamento com fabricantes, conduzindo reuniões de alinhamento, negociações, visitas e acompanhamento de performance.
• Negociar condições comerciais, metas conjuntas, verbas de marketing e possíveis exclusividades com fabricantes, atuando em negociações de alto valor e impacto para o negócio.
• Definir e acompanhar estratégias de precificação, compras e posicionamento de produtos, assegurando competitividade, rentabilidade e mitigação de riscos.
• Gerenciar o estoque de forma estratégica, validando informações elaboradas pelos analistas e contribuindo para estratégias de giro, recomposição e redução de excessos.
• Desenvolver e implementar estratégias comerciais de produtos e soluções, alinhadas aos objetivos do negócio e às demandas do mercado.
• Mapear tendências de mercado, movimentos da concorrência e comportamento do consumidor, orientando ajustes de estratégia e listas de preços.
• Garantir que a equipe comercial esteja atualizada quanto a portfólio, posicionamento e diferenciais competitivos.
• Coordenar e influenciar a criação de conteúdos de treinamento e apresentações sobre produtos, tanto para públicos internos (vendas) quanto externos (revendas e parceiros).
• Planejar e executar ações de cross-selling, campanhas de incentivo e iniciativas comerciais, voltadas a canais e equipe interna de vendas.
• Validar briefings de campanhas de marketing, assegurando alinhamento entre objetivos comerciais, público-alvo e estratégia do negócio.
• Acompanhar e responder auditorias relacionadas aos fabricantes, atuando no escalonamento e resolução de eventuais não conformidades.
• Validar propostas estratégicas, campanhas e ações comerciais desenvolvidas por profissionais de níveis pleno e júnior.
• Acompanhar e validar cadastros de Part Numbers e informações estratégicas no sistema.
• Tomar decisões baseadas em inteligência de mercado, análise de dados, indicadores de performance e tendências tecnológicas.
• Supervisionar a integração de novos fabricantes e realizar o onboarding na plataforma Scansource Cloud, quando aplicável.
• Estabelecer e manter relacionamento estratégico com canais de distribuição e parceiros comerciais, quando aplicável.

Gerente de Portfólio – Cibersegurança

• Lider técnico do time de arquitetura, auxiliando o time nas demandas e atividades.
• Definição de arquiteturas e padrões de segurança.
• Realizar estudos e PoCs de novas soluções de segurança, a fim de buscar a melhor solução para a necessidade da empresa.
• Definição e condução do roadmap tecnológico de segurança.

Especialista de Segurança da Informação – Arquitetura de Segurança

• Identify, analyze, and monitor vulnerabilities in applications and environments.
• Perform SAST and DAST analyses on the company's projects.
• Work directly with development teams to remediate security flaws.
• Support the implementation of DevSecOps practices in internal processes.
• Conduct security validations in CI/CD pipelines.
• Prepare technical reports and track remediation plans.
• Contribute to the continuous improvement of the company's security maturity.

Information Security Specialist

• Planejar e conduzir testes de intrusão complexos (red team, adversary simulation, ataques encadeados), incluindo ambientes híbridos (on-premise, cloud e mobile), com foco em cenários realistas e de alto impacto;
• Estruturar e evoluir metodologias, frameworks e playbooks de ataque, alinhando as iniciativas ofensivas aos riscos de negócio e às prioridades estratégicas da organização;
• Liderar exercícios de Red Team, Purple Team e simulações baseadas em TTPs reais (MITRE ATT&CK), avaliando a efetividade dos controles de defesa e resposta;
• Desenvolver técnicas, exploits, ferramentas e automações avançadas, além de pesquisar vulnerabilidades (0-day, n-day, lógica de negócio) e novas formas de exploração;
• Apoiar investigações de segurança com visão ofensiva, ajudando a reproduzir ataques, validar hipóteses e identificar vetores de comprometimento;
• Atuar como mentor para níveis júnior, pleno e sênior, elevando o nível técnico do time e disseminando conhecimento;
• Atuar próximo à liderança de segurança, arquitetura e negócio, traduzindo riscos técnicos em impacto para a organização e apoiando decisões estratégicas;
• Avaliar a eficácia de controles (EDR, WAF, IAM, SIEM, etc.) através de técnicas ofensivas avançadas;
• Produzir relatórios de alto nível com visão de risco, impacto financeiro e recomendações estratégicas, além de documentação técnica detalhada;
• Propor melhorias estruturais na postura de segurança, ferramentas, processos e capacidades ofensivas.

Especialista em Cyber Segurança – Ofensivo

• Auxiliar na avaliação de riscos e vulnerabilidades de segurança relacionados às instalações físicas e ao pessoal
• Coordenar e supervisionar as operações diárias de segurança física, garantindo a conformidade com os protocolos de segurança estabelecidos
• Interagir com a equipe de segurança, fornecedores e autoridades policiais, conforme necessário
• Implementar procedimentos de controle de acesso
• Monitorar e avaliar tecnologias de segurança
• Realizar inspeções e auditorias de segurança regulares
• Fornecer treinamento e recursos para a equipe de segurança e funcionários
• Responder a incidentes e emergências de segurança, documentando as ações tomadas
• Manter registros e documentação precisos relacionados a incidentes, políticas e procedimentos de segurança

See all jobs on JobTailor