Security Engineer

• Assist in identifying infrastructure and web vulnerabilities
• Assist in identifying digital threats
• Assist in the collection, analysis, and handling of information security incidents
• Assist with improvements to collection tools and reporting

Cybersecurity Intern - Blue Team

• Atuar na área de Engenharia de Segurança da Informação, sendo responsável pelo desenho, implementação, sustentação e evolução dos controles técnicos de segurança que suportam os ambientes corporativos, aplicações, integrações, plataformas cloud e iniciativas de transformação digital da organização.
• O profissional será responsável por garantir a adoção de práticas de Security by Design, DevSecOps, proteção de dados, segurança em nuvem, gestão de identidade, monitoramento contínuo e integração dos controles de segurança ao ciclo de vida das soluções corporativas.
• Definir requisitos e padrões de segurança para novos projetos, aplicações e integrações.
• Participar de processos de homologação técnica de fornecedores e soluções.
• Conduzir análises de risco técnico e definição de controles compensatórios.
• Elaborar recomendações de segurança para ambientes on-premise, cloud e híbridos.
• Implementar práticas de Security by Design e Zero Trust.
• Definir e implementar controles de segurança para Azure, OCI e ambientes SaaS.
• Implementar políticas de segmentação, hardening, gestão de identidades e proteção de workloads.
• Atuar em iniciativas de Cloud Security Posture Management (CSPM).
• Apoiar projetos de migração e modernização de aplicações para nuvem.
• Implementar controles de criptografia, proteção de dados sensíveis e gestão de segredos.
• Apoiar iniciativas de LGPD, classificação da informação e proteção de dados de saúde (PHI).
• Definir controles de retenção, descarte, mascaramento e anonimização.
• Integrar plataformas corporativas com SIEM.
• Construir casos de uso de detecção.
• Desenvolver correlações, regras e indicadores de segurança.
• Apoiar investigações de incidentes e atividades de threat hunting.

Especialista em Engenharia de Segurança da Informação

• Conduct analysis of externally available alternatives to meet detailed technical requirements for security and network infrastructure
• Propose alternatives aligned with the client's architecture and according to best practices
• Participate in meetings, gather requirements from clients, produce technical specifications, prepare documentation, and apply configurations and rules on firewall devices and network switches
• University degree in IT/Telecommunications-related fields
• Advanced knowledge of Operating Systems (Windows, Linux, UNIX)
• Knowledge of ITSM ticket management tools is desirable (HPSM, Remedy)

Security Specialist

• Conduct offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems
• Plan, execute, and lead advanced penetration tests for custom and third-party web applications, complex enterprise applications (e.g., ERP, legacy systems, industrial platforms), and cloud-native and hybrid architectures
• Document findings in high-quality technical reports, including clear risk ratings, business impact analysis, and actionable remediation recommendations
• Present results to technical and non-technical stakeholders, including engineering teams, management, and customers
• Advise on risk mitigation strategies, secure design principles, and defensive improvements.

Offensive Security Specialist

• Design, implement, and manage network security solutions (WAF, IPS, firewall, network monitoring)
• Assess and improve network and technology security architecture, ensuring compliance with industry standards and best practices
• Develop use cases for monitoring the environment
• Identify and track potential risk scenarios and/or security incidents
• Assist in developing remediation and containment actions for incidents
• Support root-cause identification of security incidents
• Work with clients' security and IT operations teams to implement containment or eradication plans for security incidents
• Conduct training on technologies and security awareness
• Participate in incident response and crisis management related to information security
• Other routine responsibilities of the area.

Information Security Analyst – Mid/Senior, Network Security

• Prepare and review documents and procedures related to occupational safety, and maintain physical and electronic records for the Safety area
• Support departments on safety-related matters within the criteria established by the SGI (Integrated Management System)
• Prepare and review documents for the Safety Management System
• Coordinate hazard identification and risk assessment surveys for activities
• Participate in project and process evaluations with respect to occupational safety aspects (physical and ergonomic risks)
• Propose safety improvements for projects and processes; coordinate activities carried out by CIPA (Internal Accident Prevention Committee)
• Develop and deliver trainings, onboarding sessions and educational talks related to Occupational Safety for employees and third parties
• Contribute to the preparation of the annual schedule of safety inspections for all company areas
• Carry out safety inspections according to the schedule and internal procedures
• Participate in accident investigations, preparing safety reports and CAT (Work Accident Report), and submit CAT to the competent authorities
• Monitor environmental aspects related to noise to ensure compliance with current legislation
• Assess the quality and functionality of PPE used by the company
• Oversee contractor-performed services with regard to safety aspects
• Monitor/evaluate the execution of high-risk activities at the plant

Junior Occupational Safety Technician

• The Cybersecurity Manager will be responsible for leading and managing Localiza&Co’s corporate Identity and Information Systems Governance program, raising maturity on the subject across the company and acting as the organization’s reference for Identity and Information Systems Governance.
• The professional will be responsible for leading people and KPIs, managing the area’s budget, defining and guiding the team on Information Security strategy for both short- and long-term horizons, ensuring adherence to priorities, resolving complex and/or organizational issues, and acting as the program interlocutor — always positioning Information Security as an enabler for the business.
• The role requires a systemic and comprehensive outlook, autonomy to run the area, the ability to explain, negotiate and prioritize deliverables with senior management, and to provide technical guidance to other professionals.
• The Cybersecurity Manager receives strategic objectives and is accountable for defining how to act to ensure the planned deliveries, working with a strong awareness of business impacts, returns and risks.

Cybersecurity Manager

• Work on engineering, maintenance and continuous improvement of security solutions such as SIEM, EDR/XDR, NDR and incident response tools;
• Lead and support security incident response, including root cause analysis, containment, eradication and lessons learned;
• Perform threat hunting activities, identifying anomalous behaviors and advanced techniques, tactics and procedures (TTPs);
• Tune and optimize security tools to reduce false positives and improve detection effectiveness;
• Support creation and evolution of detection use cases, correlations and response playbooks;
• Collaborate closely with SOC, GRC, infrastructure, network and technology teams;
• Contribute to the definition of secure architectures and technical security requirements;
• Support simulation exercises, readiness tests and, when applicable, Purple Team initiatives;
• Produce technical documentation, executive reports and continuous improvement recommendations;

Senior Cyber Security Analyst

• Act as the technical lead for the Application Security program, driving continuous evolution of the Secure SDLC and ensuring security is integrated from solution design through production deployment.
• Define secure development standards, Security Gates, Security by Design, Security by Default, Threat Modeling, minimum security requirements, and Security Champions; support Security Architecture in adopting best practices.
• Promote a secure development culture through training, workshops, and technical support to development squads.
• Technically lead the Application Security (AppSec) program, ensuring continuous improvement of the Secure SDLC and enhancing security controls in development pipelines (Azure DevOps and GitHub).
• Validate vulnerabilities identified by tools, prioritizing based on CVSS, business context, and exploitability.
• Technically analyze vulnerabilities found in source code.
• Reproduce vulnerabilities when necessary to provide technical proof.

Senior Information Security Analyst – AppSec

• Atuar de forma consultiva em todo o ciclo de vendas, em parceria com o time comercial.
• Realizar assessments de segurança em ambientes de clientes, identificando lacunas e riscos.
• Desenhar arquiteturas de segurança integradas (rede, identidade, endpoint e cloud).
• Projetar e apresentar soluções baseadas em CrowdStrike, Fortinet, Zscaler.
• Elaborar materiais de apoio à venda (propostas técnicas, apresentações executivas, respostas a RFP/RFI).
• Traduzir riscos cibernéticos em impacto de negócio.
• Apoiar negociações técnicas e o fechamento de vendas, garantindo a viabilidade das soluções propostas.
• Realizar handover técnico para os times de implantação e/ou operação.

Arquiteto de Soluções – Cybersecurity

• Implement security controls across the development lifecycle, from design to deployment, as part of the AppSec program.
• Conduct Threat Modeling sessions with product squads to identify architectural risks before implementation.
• Manage and optimize SAST, DAST and SCA tools, prioritizing findings based on real business risk rather than only isolated technical severity.
• Maintain the Security Champions program, empowering developers to be the first line of defense.
• Validate the architecture of new projects and API integrations, ensuring compliance with OWASP ASVS and internal standards.
• Manage the vulnerability remediation workflow with engineering, addressing root causes rather than just symptoms.
• Translate technical risks into business impact for Product Owners and stakeholders. Automate security validations in CI/CD pipelines and maintain metrics such as remediation SLAs and defect density.

Security Engineer, AppSec

• Executar migração do ambiente SAP GRC Access Control 10.x On-Premises para 12 Embedded.
• Planejar e conduzir a migração de aproximadamente 33.000 perfis de autorização.
• Validar perfis simples, compostos, objetos de autorização, roles derivadas e regras de SoD.
• Conduzir testes técnicos e funcionais, garantindo rastreabilidade e integridade.
• Produzir documentação técnica e funcional da migração.
• Trabalhar em colaboração com equipes Basis, Security, GRC e Arquitetura.

Especialista Técnico, SAP Security & GRC Access Control

• Lead the technical migration of the SAP GRC Access Control environment from 10.x to 12 Embedded
• Recommend and provide migration accelerator solutions, evaluating specialized tools and automated methodologies
• Act as the technical reference for the implementation partner
• Conduct technical workshops and validations with business areas
• Interact directly with SAP to address critical incidents and propose fixes
• Influence strategic decisions regarding procurement of complementary tools or services

Senior Consultant SAP Security, GRC Access Control

• Gather and analyze requirements together with business areas;
• Convert functional requirements into technical requirements, preparing high- and low-level architecture documents;
• Participate in alignment meetings and requirements-gathering sessions with business users;
• Facilitate Fit-to-Standard workshops;
• Validate requirements in the system and in the SAP Fiori application library, ensuring end-to-end coverage of functionalities in Solution & Architecture documents;
• Execute exploratory testing to ensure consistency of functional design documents;
• Update design documents during functional testing, defect remediation, integration testing, and UAT;
• Create, review, and update SAP authorization concepts;
• Contribute to the creation and review of training materials;
• Provide support during Hypercare activities;
• Perform other routine activities within the area.

Senior SAP Security Consultant – GRC/AC

• Strategically lead the Payroll, HR Processes, HR Systems, Labor Relations, Occupational Safety, Well-being and Employee Experience functions.
• Drive digital transformation, automation and process redesign projects to deliver productivity gains, scalability and financial efficiency.
• Lead the implementation and optimization of HR systems and technologies, leveraging digital solutions to enhance employee experience and business management.
• Develop KPIs, controls, and management and governance models that support decision-making and operational sustainability.
• Ensure correct application of labor legislation, collective agreements and conventions, and maintain strategic relationships with labor unions.

Human Resources Manager – HR Processes, Systems, Payroll, Labor Relations, Occupational Safety, Well-being and Employee Experience

• Define and implement security strategies for applications, including those that integrate LLMs and generative AI
• Collaborate with development teams to integrate security practices from the start of the software development lifecycle
• Conduct architecture, code, and design reviews to identify potential vulnerabilities and security issues
• Define guardrails and standards for applications using LLMs, addressing risks such as prompt injection, insecure output handling, data leakage via outputs, excessive agent agency, and cost abuse (denial-of-wallet)
• Establish guidelines for the safe use of AI-assisted development tools by engineering teams, balancing productivity, intellectual property protection, and prevention of sensitive data leakage
• Develop and promote security standards and best practices across the development team
• Provide technical guidance and security training to development teams
• Be familiar with tools for automated quality validation in CI/CD pipelines such as SAST, DAST, SCA and Secret Scanning
• Monitor security threat trends and evolutions and continuously update protective measures — including the emerging threat landscape for AI systems
• Develop creative solutions to complex security problems that balance business needs and risks
• Use your security experience and intuition to hunt for threats in corporate and production environments
• Ability to read and communicate in English

Senior Application Security Architect – AppSec

• Support the company in structuring and evolving cloud identity and access management, establishing standards and best practices
• Design, implement, and maintain access profiles in the Cloud applying least-privilege principles for infrastructure, development, data, security, and other teams
• Define and manage IAM Roles and Policies specific to job functions, ensuring segregation of duties
• Define, deploy, and support IAM Roles and STS (Security Token Service) for both human and non-human access
• Support audits and compliance requirements

Senior Information Security Analyst – IAM & Cloud

• Work in partnership with Sales to pursue business opportunities, responsible for developing new projects, participating in meetings, presenting the companys service portfolio, and gathering client requirements to secure projects and expand the customer base.
• Coordinate the development of action plans based on priorities identified with clients during project conception.
• Lead meetings to provide technical explanations and advocate for projects to clients, working together with the Sales team.
• Be responsible for the technical/commercial proposals submitted to clients, describing them clearly and tailored to their needs, covering all assumptions, deliverables, and costs considered in the service project, ensuring centralization, presentation, and detailed documentation of all project information prior to submission.
• Price the costs identified in projects and determine the values to be included in service proposals sent to clients.
• Guide the development of technical designs for requested services through careful analysis and interpretation of technical requirements, definition of the service scope, and identification of additional resources, aiming to propose the best service solutions aligned with clients needs and expectations.
• Lead internal innovation or improvement projects to support your manager when necessary or requested.
• Provide guidance and assistance to junior team members with their challenges and adaptations, addressing technical and organizational aspects in support of your manager.
• Perform other related professional activities inherent to the role as instructed or requested by your immediate supervisor.
• Maintain ongoing development and certification with Palo Alto Networks, driving business and opportunities with clients.

Security Specialist – Palo Alto

• Execute and improve monitoring, detection, and response activities for cybersecurity incidents.
• Continuously monitor networks, endpoints, applications, and critical assets, identifying anomalies and threats to information security.
• Detect and analyze attack attempts, suspicious behavior, exploitable vulnerabilities, malicious actions, and data leakage events.
• Triage, classify, and escalate security alerts according to criticality and business impact.
• Lead and support incident response processes from initial identification through containment, eradication, and recovery.
• Participate in cyber exercises, red/blue team simulations, and Capture the Flag (CTF) events with internal teams and external partners.
• Prepare technical and executive post-incident (post-mortem) reports, including root cause analysis and remediation recommendations.
• Perform proactive threat hunting based on hypotheses and threat intelligence (CTI/OSINT) to anticipate attack vectors before they materialize.
• Work with CTI and OSINT platforms and security ecosystem partners to collect and analyze indicators of compromise (IOCs).
• Monitor trends in cyber threats, critical vulnerabilities (CVEs), and TTPs mapped to the MITRE ATT&CK framework.
• Operate, configure, and maintain security solutions: SIEM, EDR/XDR, Firewalls, WAF, IDS/IPS, and Proxy.
• Contribute to the creation and tuning of detection rules, correlations, and alerts to reduce false positives under technical supervision.
• Perform cyber hygiene activities: configuration checks, patching/updates, and hardening of systems and services.
• Develop and review documentation, playbooks, runbooks, operational procedures, and cybersecurity standards.
• Support continuous improvement initiatives for the security program, promoting the evolution of SOC and CSIRT maturity.

Senior Cybersecurity Analyst – Cyber Defense

• Conduct advanced threat hunting activities in corporate environments (on-premises and cloud)
• Identify anomalous behaviors and indicators of compromise (IOCs) and indicators of attack (IOAs)
• Develop hunting hypotheses based on threat intelligence and financial sector trends
• Analyze logs and telemetry from multiple sources (EDR, SIEM, NDR, Cloud, Identity, etc.)
• Create and refine detection rules, queries, and use cases
• Work closely with SOC, incident response, and security engineering teams
• Produce technical and executive reports on identified threats
• Automate detection and hunting processes wherever possible
• Follow and apply frameworks such as MITRE ATT&CK

Security Engineer jobs in Brazil

See all jobs on JobTailor