Cybersecurity Analyst, Mid-Level

ROIT

. Define and maintain secure configuration standards for cloud environments, servers, workstations, and network devices.

Posted 10/20/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security and infrastructure management, with a strong focus on implementing secure configurations, vulnerability management, and compliance with standards such as ISO 27001. Proficient in collaborating with cross-functional teams to ensure robust security controls and incident response.

Highest-signal resume keywords

Cloud Security ManagementGoogle Cloud Platform (GCP)Vulnerability ManagementISO 27001 CertificationWAF and API Protection

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Infrastructure SecurityVulnerability ManagementCloud LoggingNetwork SegmentationCIS BenchmarksInfrastructure as CodeScripting in PythonScripting in BashScripting in PowerShellTCP/IP Networking

Soft Skills

Strong Written Communication

Tools & Technologies

EDR ToolsMDM SolutionsCloudflare Zero TrustPfSenseKaspersky EDR

Certifications & Qualifications

Google Professional Cloud Security EngineerCCSKSecurity+CKS

Industry Keywords

Regulated EnvironmentsFinancial SectorTax SectorBrazil's LGPDNIST CSF

Tech Stack

Tools & technologies

CloudDNSFirewallsGoogle Cloud PlatformLinuxPythonTCP/IP

About the role

Key responsibilities & impact

Define and maintain secure configuration standards for cloud environments, servers, workstations, and network devices.
Implement and monitor perimeter and access protection controls, including WAF, API protection, Zero Trust, MFA, and network segmentation.
Manage infrastructure vulnerability and patch programs, tracking coverage by EDR, antimalware, and MDM tools.
Ensure immutable backups are in place and restoration tests are performed, while supporting the encryption of sensitive data.
Integrate cloud and infrastructure logs with the SIEM and support incident triage and response alongside the outsourced monitoring service (MDR).
Produce evidence for audits, ISO 27001 certification, and customer due diligence processes.
Monitor security metrics and document implemented standards, exceptions, and controls.
Partner with Infrastructure, Platform Engineering, and IT teams to contribute to measurable, documented, and auditable controls.

Requirements

What you’ll need

3–5 years of experience in infrastructure or cloud security, or in infrastructure and SRE with a security focus.
Hands-on experience with Google Cloud Platform (GCP), including IAM, VPC, firewall rules, Cloud Logging, and KMS.
Knowledge of networking, including TCP/IP, DNS, firewalls, segmentation, and VPNs.
Experience with hardening and CIS benchmarks in Linux and Windows environments.
Experience with WAF and API protection.
Knowledge of vulnerability and patch management.
Familiarity with infrastructure as code and scripting in Python, Bash, or PowerShell.
Knowledge of ISO 27001, CIS Controls, or NIST CSF.
Strong written communication skills for documenting standards, exceptions, and evidence.
Certifications such as Google Professional Cloud Security Engineer, CCSK, Security+, or CKS are a plus.
Experience with CSPM, Cloudflare Zero Trust, pfSense, Kaspersky EDR, or MDM solutions is a plus.
Experience in regulated environments, particularly in the financial and tax sectors, or experience with Brazil's LGPD, is a plus.
Experience serving as the point of contact for a SOC or outsourced MDR service is a plus.