Infrastructure Analyst, Junior

BRB Seguros

. Monitor and analyze Information Security events and alerts through NOC/SOC operations, performing triage, correlation, initial investigation, and incident escalation .

Posted 9/29/2026full-timeBrasília • BrazilJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security event monitoring, incident response, and vulnerability management, with a strong focus on utilizing tools like CrowdStrike and Fortinet. Proficient in Microsoft 365 security features and committed to maintaining compliance with ISO/IEC 27001 and data protection regulations.

Highest-signal resume keywords

Information Security MonitoringIncident ResponseVulnerability ManagementCrowdStrike EDRFortinet Firewall Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityVulnerability IdentificationRisk ManagementSIEMLog AnalysisWindows Operating SystemLinux Operating SystemSecure Development PracticesSASTIdentity and Access Management

Soft Skills

Strong Communication SkillsOrganizational SkillsAnalytical AbilityCommitment to Continuous Learning

Tools & Technologies

CrowdStrikeFortinetMicrosoft 365SonarQubeVPNs

Certifications & Qualifications

ISO/IEC 27001 Knowledge

Industry Keywords

NOCSOCPhishingMalwareData ProtectionLGPDCyber Threats

Tech Stack

Tools & technologies

Linux

About the role

Key responsibilities & impact

Monitor and analyze Information Security events and alerts through NOC/SOC operations, performing triage, correlation, initial investigation, and incident escalation
Protect endpoints using CrowdStrike by monitoring alerts, detections, vulnerabilities, policies, and agent health
Support the administration and monitoring of Fortinet firewall security controls, including events, access, blocks, VPNs, and security policies
Work with Microsoft 365 E5 security features, supporting identity controls, MFA, account protection, email, collaboration, and threat prevention
Monitor and investigate events related to phishing, malware, suspicious access, account compromise, and anomalous behavior
Support SOC operations by monitoring alerts and events from endpoints, firewalls, servers, applications, identity systems, and cloud environments
Collaborate with NOC and SOC teams to monitor events that may affect the availability, integrity, or security of environments
Support Vulnerability Management by tracking the identification, classification, prioritization, remediation, and validation of identified vulnerabilities
Support identity and access management (IAM), including reviews of permissions, privileges, administrative accounts, and third-party access
Support secure development practices through SAST with SonarQube, tracking code vulnerabilities identified with development teams
Participate in the investigation and handling of Information Security incidents, supporting evidence collection, analysis, containment, remediation, and follow-up on corrective actions
Support the implementation, maintenance, and continuous improvement of Information Security controls related to ISO/IEC 27001, contributing to the company’s compliance and certification process
Support Information Security risk assessments, vulnerability identification, and the definition of risk mitigation actions
Support the preparation, review, and updating of Information Security policies, standards, procedures, and controls
Monitor security metrics, dashboards, and reports, contributing to risk identification and continuous improvement of controls
Support Information Security awareness campaigns and initiatives addressing phishing, social engineering, credential protection, and best practices

Requirements

What you’ll need

Completed or ongoing higher education in Information Security, Computer Networks, Information Systems, Computer Science, Computer Engineering, or related fields
Knowledge of Information Security, networking, Windows/Linux operating systems, and IT infrastructure
Knowledge of SOC/NOC concepts, SIEM, log analysis, monitoring, and incident response
Basic knowledge of EDR/corporate antivirus solutions, preferably CrowdStrike
Knowledge of firewalls, VPNs, access control, and network security, preferably with Fortinet solutions
Knowledge of the Microsoft 365 security ecosystem, including Entra ID, MFA, identity protection, email, and collaboration
Understanding of identity and access management (IAM), privileges, and the principle of least privilege
Basic knowledge of vulnerability management, risk classification, vulnerability remediation, and tracking
Understanding of SAST and secure development, preferably with knowledge of SonarQube
Basic knowledge of phishing, malware, social engineering, credential compromise, and major cyber threats
Knowledge of or interest in ISO/IEC 27001, Information Security controls, risk management, auditing, and evidence organization
Understanding of Brazil’s LGPD and principles related to data protection and privacy
Ability to perform analysis and troubleshooting, document incidents, and follow technical procedures
Strong communication and organizational skills, analytical ability, and a commitment to continuous learning

Benefits

Comp & perks

Hybrid work available after 90 days of employment
First three months in a fully on-site work model
Position also open to persons with disabilities (PwD)
Inclusive culture grounded in empathy, diversity, and respect
Professional development through continuous learning