Senior Information Security Analyst

Junto Seguros

. Operate IAM and PAM solutions and implement the access standards defined by the company.

Posted 11/10/2026full-timeCuritiba • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) and Privileged Access Management (PAM), with a strong focus on security incident response, cloud security in AWS and GCP, and compliance with NIST CSF and ISO 27001 standards. Proficient in implementing security controls, managing privileged credentials, and utilizing AI for security automation and detection.

Highest-signal resume keywords

IAM/PAM ManagementSecurity Incident ResponseCloud Security (AWS/GCP)DLP Solutions OperationNIST CSF and ISO 27001 Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementAccess Control ImplementationVulnerability ManagementAuthentication Protocols (SAML, OAuth, OIDC, Kerberos)Password Vault ManagementCloud Workload MonitoringSecurity HardeningAI in Security ApplicationsEDR and NDR InvestigationContinuous Monitoring

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

Active DirectoryLDAPMicrosoft 365DUOCSPMCWPPDLP SolutionsEmail Security ControlsIncident Response ToolsSecurity Automation Tools

Certifications & Qualifications

CISSPCISMGCIHAWS Certified Security – SpecialtyGoogle Professional Cloud Security Engineer

Industry Keywords

Information SecurityRegulated IndustrySUSEPBrazil’s LGPDCybersecurity Compliance

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Operate IAM and PAM solutions and implement the access standards defined by the company.
Manage local, remote, privileged, and third-party access based on least privilege and segregation of duties.
Manage the identity lifecycle, including provisioning, offboarding, third-party access control, and the removal of orphaned accounts.
Administer SSO, MFA, and authentication, integrating AD/LDAP, Microsoft 365, and DUO.
Manage privileged credentials, passwords, and keys, including password vaults, self-service, and compromised credential remediation.
Perform hardening, patch management, and vulnerability remediation across workstations, servers, and appliances.
Operate DLP and email security controls, including anti-spam, anti-phishing, SPF, DKIM, and DMARC, and manage the certificate lifecycle.
Implement defined hardening controls for databases.
Support Zero Trust and network security initiatives in collaboration with infrastructure teams.
Implement identity and access controls in AWS and GCP, covering service accounts, federation, and least privilege.
Monitor the security posture of cloud workloads using CSPM and CWPP and remediate configuration deviations.
Support cloud incident investigations using native logs, including CloudTrail and Cloud Audit Logs.
Participate in incident response involving identities, endpoints, and data, including triage, containment, investigation, and documentation of lessons learned.
Investigate EDR, NDR, and SSE alerts in collaboration with the SOC and contribute to playbook updates.
Operate detection and response controls addressing the use of AI within the company, including prompt injection, autonomous agents, data leakage through AI tools, and shadow AI.
Use AI for alert triage and the automation of recurring security tasks.
Gather evidence demonstrating control alignment with the NIST CSF and ISO 27001 and support audits.
Maintain metrics and continuous monitoring routines.
Propose improvements to the processes and controls within the areas managed.

Requirements

What you’ll need

Bachelor’s degree in Technology or a related field.
At least 5 years of experience in Information Security, with a focus on IAM/PAM and endpoints.
Experience in security incident response.
Experience operating DLP solutions.
Knowledge of AI applied to security, including the risks of corporate AI use and the use of AI for detection and automation.
Hands-on experience with market-leading PAM and IGA solutions.
Experience with Active Directory/LDAP, SSO, MFA, and authentication protocols, including SAML, OAuth, OIDC, and Kerberos.
Experience with EDR, vulnerability management, and patch management.
Knowledge of AWS and GCP security, including native IAM, service accounts, and logging.
Knowledge of the NIST CSF and ISO 27001/27002.
Basic English proficiency.
Experience in a regulated industry, such as insurance or financial services, with knowledge of SUSEP and Brazil’s LGPD preferred.
Certifications such as CISSP, CISM, GCIH, AWS Certified Security – Specialty, or Google Professional Cloud Security Engineer preferred.

Benefits

Comp & perks

Meal and food allowance (flexible card)
Christmas benefit – double food allowance in December
Extended maternity leave
Extended paternity leave
Transportation allowance
Birthday day off
SulAmérica health insurance
Dental insurance
Wellhub (formerly Gympass)
Conexa Saúde (therapy, nutritionist, and medical consultations)
Private pension plan
Profit-sharing plan
Daycare or nanny allowance
Life insurance
Semi-flexible schedule (40 hours per week)
Access to a Corporate University with a variety of courses
Professional development support
Two days of remote work per week
Position designated for people with disabilities