Senior Information Security Analyst

We are a software engineering consulting firm with over 15 years of experience in software quality and high technical level when it comes to automation testing, digital security, and DevOps culture.

_We never stop learning and growing_, because we're always looking for excellence and development.

_We value our collaborative environment_, because we believe in the strength of our team.

_We act with transparency and respect_, because we seek to maintain ethical and moral standards in our relationships with colleagues, partners, and clients.

Our team is growing. We form a committed team focused on results and capable of solving challenging problems. Come grow with us!

As Senior Information Security Analyst at PrimeUp you will:

• Work within one of the partners of one of the largest banks in the country whose central purpose is to seek maximum innovation, sustainability, and good experiences for its collaborators and clients;
• Main challenges and responsibilities:
  • Configuration and management of networks;
  • Administration and configuration of firewalls;
  • Automation of procedures and routines;
  • Management and updating of Windows and Linux operating systems, including application of security patches;
  • Definition and execution of backup and storage strategies;
  • User and group management (Active Directory, domains, local users);
  • Administration and support for cloud providers (AWS, Azure, GCP, etc.);
  • Management of cloud services;
  • Creation and maintenance of rules for WAF;
  • Use of security tools focused on the cloud and infrastructure;
  • Experience with code-focused security tools (SCA, SAST);
  • Participation in DevOps practices;
  • Provisioning of services and infrastructure.

To take on this challenge you need to have knowledge/experience in:

• Automation and Scripting:
  • Bias towards automation of environments and processes;
  • Experience with Ansible and Terraform;
  • Knowledge in programming/scripting languages focused on automation, such as Python, Shell, Ruby, or Go;
• Infrastructure and Cloud (AWS):
  • Solid experience with AWS (total focus on AWS cloud services);
  • Administration of instances and services with Amazon Linux, CentOS, Ubuntu, and Aurora;
  • Knowledge and implementation of backup policies (incremental and full);
  • Management of Security Groups (SG), IAM, and security practices in AWS;
  • Experience with Security Hub and concepts of Security Manager.
• Information Security:
  • Knowledge in frameworks such as NIST and OWASP SAMM;
  • Analysis and mitigation of vulnerabilities in: Operating System, Kernel, Applications, and Products, Obsolescence, and patch management;
  • Knowledge of WAF (header inspection, body, APIs REST, and HTTPS);
  • Familiarity with CrowdStrike (agent management);
  • Administration of Firewall (Palo Alto, Checkpoint, or similar);
  • Knowledge of north-south traffic inspection and east-west;
  • Management of access logs, executed commands, and integration with audit tools;
  • Experience with Prisma Cloud and Qualys (including agent installation and management), or similar tools.

It would be great if you also had:

• Bachelor's degree in Information Security, IT, or related fields;
• Monitoring and observability: Ability to interpret graphs and metrics for security and performance analysis;
• Basic notions of SIEM.

As part of the PrimeUp team you will have:

• CLT employment contract with compatible remuneration to the market;
• Food Allowance;
• Lunch Voucher;
• Health Plan;
• Dental Plan;
• Life Insurance;
• Annual Leave Bonus;
• Certification Reimbursement;
• PrimeUp Academy (professional training network);
• Participation in Profits and Results (PLR);
• Academy Plan;
• Wellness Program with psychological, social, financial, and legal support.