Junior III Information Security Analyst – Security Controls

Bellinati Perez

. Execute access provisioning, modifications, and revocations in Active Directory and Entra ID in accordance with formal procedures .

Posted 9/18/2026full-timeCuritiba • BrazilJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in access provisioning and identity lifecycle management, with a strong focus on Active Directory and Entra ID. Proficient in data protection regulations and security policies, ensuring compliance and effective incident response.

Highest-signal resume keywords

Active Directory ManagementEntra ID FamiliarityMicrosoft Purview ExperienceDLP Policy ManagementPowerShell Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Access ProvisioningIdentity Lifecycle ManagementData Loss Prevention (DLP)Incident ResponseITSM Tool OperationMicrosoft Graph APIDocumentation SkillsPhishing AnalysisAudit SupportBasic GPO Concepts

Soft Skills

Strong CommunicationAttention to DetailProblem-Solving

Tools & Technologies

Microsoft 365CrowdStrike FalconEDR/XDR PlatformsSensitivity Labels

Certifications & Qualifications

Bachelor’s Degree in Information TechnologyISO 27001/27701 Knowledge

Industry Keywords

Brazil’s LGPDFinancial Sector Security RequirementsSLA Management

Tech Stack

Tools & technologies

ITSM

About the role

Key responsibilities & impact

Execute access provisioning, modifications, and revocations in Active Directory and Entra ID in accordance with formal procedures
Support the identity lifecycle—including onboarding, internal transfers, and offboarding—integrated with the corporate provisioning system
Conduct periodic access review and recertification campaigns with managers
Identify and address orphaned accounts, excessive access, deviations from standard profiles, and inappropriate accumulation of permissions
Maintain the profile matrix by department and portfolio, formally documenting approved exceptions
Support privileged account reviews and segregation-of-duties checks
Support the operation of Microsoft Purview, including the application of sensitivity labels and maintenance of DLP policies
Triage DLP alerts, classifying false positives, misconduct, and incidents, and ensuring appropriate escalation
Monitor the evolution of policies from audit mode to selective blocking, supporting analysis with data
Support data-flow inventory activities and maintain the list of authorized external destinations
Produce remediation evidence for the DPO and internal and client audits
Handle Information Security tickets within the agreed SLA
Perform initial triage of EDR and SIEM alerts, applying playbooks and escalating incidents that exceed first-level support
Conduct initial analysis of phishing reports submitted by employees and initiate blocking or takedown requests
Accurately record and document events, contributing to the team’s knowledge base
Advise employees on security questions and support security awareness initiatives

Requirements

What you’ll need

Bachelor’s degree in Information Technology, Information Security, or a related field
Operational knowledge of Active Directory, including users, groups, organizational units, and basic GPO concepts
Familiarity with Entra ID
Basic administrative knowledge of Microsoft 365, including Exchange Online
Fundamentals of Brazil’s LGPD and ISO 27001/27701 as applied to access control and data protection
Experience operating an ITSM tool, including SLA management and formal service-record documentation
Basic PowerShell for querying, data extraction, and automating repetitive tasks
Strong documentation skills, including the production of evidence reviewed by external auditors
Experience with Microsoft Purview, DLP policies, or sensitivity labels
Experience with CrowdStrike Falcon or another EDR/XDR platform
Experience using the Microsoft Graph API for querying and automating tasks in Entra ID environments
Experience supporting internal or client audits
Basic understanding of the security requirements of the financial sector (BACEN Resolution 4.658)
Technical English for reading vendor documentation

Benefits

Comp & perks

Meal voucher of R$32.00 per working day
Access to a flexible benefits card
Life insurance
Partnership with SESC
Day off on your birthday
Dress code aligned with the corporate environment
Dental plan
TotalPass membership
Psychological support program, including qualified emotional support and well-being initiatives
Occupational health and safety program, including preventive actions and occupational monitoring
Partnership program with universities, educational institutions, restaurants, and local businesses (availability may vary)
Hybrid work model
Monday-to-Friday schedule, 8:00 a.m. to 5:48 p.m.