Analista de Segurança da Informação Pleno — Gestão de Vulnerabilidades e Identidades

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Analista de Segurança da Informação Pleno — Gestão de Vulnerabilidades e Identidades based in Brazil. This is an opportunity to strengthen information security operations across vulnerability management and identity and access management. You’ll play a hands-on role in identifying security risks, prioritizing remediation, and supporting secure access across the organization. The position combines technical analysis, operational discipline, incident triage, and collaboration with infrastructure and business teams. You’ll work with vulnerability scanning, IAM, SIEM monitoring, MFA, Active Directory, and security controls in a structured environment. Your work will directly contribute to reducing exposure, improving security posture, and maintaining reliable access governance. The role also offers opportunities to improve processes, automate routine activities, and develop security practices over time. It is well suited to an analytical, detail-oriented professional who values continuous learning and strong technical execution. Execute the vulnerability management lifecycle, including analyzing scan results, prioritizing vulnerabilities according to risk, and coordinating remediation with infrastructure, systems, and other responsible teams. Maintain and improve operational security indicators and remediation workbooks, including agent coverage, severity levels, and remediation SLA tracking. Operate identity and access management processes, including provisioning, deprovisioning, privilege assignment, periodic access reviews, and support for MFA mechanisms. Support corporate access-review campaigns and segregation-of-duties (SoD) validation activities. Monitor, classify, and investigate security alerts generated by tools within the assigned security scope. Perform initial security incident triage and analysis, escalating cases to the appropriate specialist when required. Prepare recurring operational security reports, metrics, and performance indicators. Create, maintain, and improve technical documentation and standard operating procedures (SOPs). Collaborate with technical and business teams to ensure security processes are executed consistently and effectively. Requirements: Professional experience in Information Security, Infrastructure, Systems Administration, or related areas, with a focus on security. Hands-on experience with vulnerability management processes and market-leading scanning tools such as Qualys, Tenable, Rapid7, or equivalent platforms. Solid knowledge of Active Directory, IAM, SSO, and MFA solutions. Practical experience monitoring and triaging security alerts through SIEM platforms. Knowledge of TCP/IP networks, network segmentation, and communication protocols. Basic administration knowledge of Windows and Linux environments. Demonstrated technical analysis capabilities and strong attention to documenting activities and procedures. Strong analytical skills and meticulous attention to detail. Organization, discipline, and a consistent approach to standardized processes. Good communication skills for daily interaction with technical teams and business stakeholders. Strong sense of responsibility, ownership, and commitment to continuous learning. Desirable qualifications: Experience with Wazuh, Elastic Stack (ELK), or other open-source SIEM platforms. Knowledge of ISO/IEC 27001 and CIS Controls frameworks. Understanding of LGPD requirements related to logs, identities, and the protection of personal data within security tools. Basic scripting knowledge in PowerShell, Bash, or Python for automating routine tasks. Entry-level Information Security certifications such as Security+, CySA+, SC-900, or SC-300. Benefits: Life insurance. Medical and dental plans. Access to a corporate learning and development platform. Profit Sharing / PPR program. Discounts at participating pharmacies. Pr