Information Security Specialist

• Coordinate and execute information security activities for a large client.
• Own the end-to-end operation of security tools.
• Manage security partners end to end.
• Administer EDR, proxy/SWG/CASB, and DLP policies.
• Manage vulnerabilities and oversee penetration tests.
• Handle real-world incidents in a corporate environment.
• Serve as the focal point for partners, an MSSP, or an outsourced SOC.
• Participate in audits related to Brazil’s LGPD, ISO 27001, and NIST.
• Create detection rules in a SIEM, when applicable.
• Automate tasks using PowerShell or Python, when applicable.

• 6+ years of experience in information security, including at least 3 years in technical operations—not solely GRC.
• Hands-on administration of EDR solutions (CrowdStrike Falcon preferred; SentinelOne, Defender for Endpoint, or equivalent also accepted).
• Hands-on administration of proxy/SWG/CASB solutions (Skyhigh/McAfee preferred; Zscaler, Netskope, Forcepoint, or equivalent also accepted), including endpoint proxy configuration.
• Implementation and tuning of DLP policies.
• Vulnerability management (Tenable, Qualys, Rapid7, or equivalent) and oversight of penetration tests.
• Handling real-world incidents in a corporate environment.
• Experience serving as the focal point for partners, an MSSP, or an outsourced SOC.
• Applied knowledge of Brazil’s LGPD, ISO 27001, and NIST, with participation in audits.
• Experience working independently or in a lean team, with a high degree of autonomy.
• SIEM experience (Splunk, Sentinel, QRadar, or equivalent) and detection rule creation.
• Security for Microsoft 365/Entra ID and cloud environments (Azure or AWS).
• Automation scripting with PowerShell or Python.
• Experience in the healthcare or pharmaceutical sectors, or working with sensitive data.

• Education assistance
• Home office allowance
• Health insurance
• Meal allowance