Senior Information Security Analyst

• Implement Secure SDLC practices.
• Perform vulnerability assessments of web applications, APIs, and microservices.
• Support development squads in adopting DevSecOps practices.
• Define security requirements for new systems and projects.
• Track the remediation of vulnerabilities identified by SAST, DAST, SCA, and penetration testing (pentests).
• Apply controls and best practices based on the OWASP Top 10 and ASVS frameworks.
• Implement and monitor security controls in AWS, Azure, or GCP environments.
• Assess security configurations and cloud environment compliance.
• Manage identity and access management (IAM).
• Conduct risk assessments and workload hardening.
• Support secure cloud architecture projects.
• Monitor, investigate, and respond to security incidents.
• Perform threat hunting and analyze indicators of compromise.
• Administer and optimize tools such as SIEM, EDR/XDR, WAF, IDS/IPS, and Threat Intelligence platforms.
• Develop use cases, correlation rules, and monitoring dashboards.
• Lead incident investigations and forensic analysis when necessary.
• Develop scripts and automations for incident response.
• Automate vulnerability management and compliance processes.
• Integrate security tool APIs to improve operational efficiency.
• Support Security Engineering initiatives.

• Bachelor’s degree in Information Security, Computer Science, Information Systems, Computer Engineering, or a related field.
• Solid senior-level experience in Information Security.
• Hands-on experience with AppSec and DevSecOps.
• Knowledge of the OWASP Top 10, SAST, DAST, and penetration testing.
• Experience with cloud platforms, preferably Microsoft Azure.
• Experience with SIEM, EDR/XDR, WAF, IDS/IPS, DLP, and IAM.
• Knowledge of the MITRE ATT&CK, NIST, and CIS Controls frameworks.
• Experience in incident response and threat hunting.
• Knowledge of TCP/IP, DNS, HTTP/HTTPS, and application architecture.
• Knowledge of programming and automation using Python, PowerShell, or Bash.
• Analytical and investigative mindset.
• Strong communication skills with technical and cross-functional teams.
• Operational and strategic perspective on security.
• Proactive and self-directed.
• Ability to influence and support different teams across the organization.
• Preferred certifications: Security+, CySA+, CEH, AZ-500, and AWS Security Specialty.
• Knowledge of Infrastructure as Code (IaC) security using Terraform.
• Experience in telecommunications and internet service provider environments.
• Experience with containers, Kubernetes, and API security.

• Transportation allowance
• Meal and/or food allowance
• Gympass
• Day off
• Partnerships and discounts
• Continuous learning