Mid-Level Information Security Analyst

securityfirst

. Administer managed and custom rules in WAFs (Cloudflare and Cloud Armor), handle false positives, and adjust exceptions and rate limiting with testing and approval.

Posted 11/12/2026full-timeSão Paulo • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in administering WAFs, EDR solutions, and vulnerability management while effectively communicating security risks and recommendations to clients. Proficient in automating processes using scripting languages and managing security incidents through comprehensive reporting and collaboration.

Highest-signal resume keywords

WAF AdministrationEDR ManagementVulnerability ScanningPython ScriptingClient Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity Solutions AdministrationNetwork ProtocolsHTTP RequestsTLS/SSL HandshakeDNS RecordsAPI IntegrationIncident ManagementVirtual PatchingData Collection Adjustment

Soft Skills

Client InteractionReport PreparationMeeting LeadershipClear CommunicationObjective Presentation

Tools & Technologies

CloudflareCloud ArmorKasperskySentinelOneWazuhVulnerability Scanners

Industry Keywords

Information TechnologyIT InfrastructureSecurity RisksOperational AutomationTechnical Reporting

Tech Stack

Tools & technologies

CloudDNSPython

About the role

Key responsibilities & impact

Administer managed and custom rules in WAFs (Cloudflare and Cloud Armor), handle false positives, and adjust exceptions and rate limiting with testing and approval.
Lead DNS and proxy migrations to Cloudflare, including inventory, planning, scheduling, testing, and rollback.
Publish mitigation rules for disclosed vulnerabilities while the client implements a permanent fix (virtual patching).
Administer EDR policies and agents (Kaspersky and SentinelOne), investigate suspicious processes and indicators, and carry out authorized response actions.
Configure and monitor vulnerability scans, validate findings, and prioritize remediation based on asset context; issue the weekly GV report.
Validate BTTng findings, confirm their relevance to the client, and manage open incidents through closure.
Lead the weekly status meeting with the client, covering events, changes, outstanding items, and next steps.
Adjust data collection and rules in Wazuh when required by the service, always with testing.
Review reports prepared by the Junior Analyst before they are sent to the client.

Requirements

What you’ll need

3–5 years of experience in Information Security or IT Infrastructure, including at least 2 years administering and operating security solutions in production environments, such as WAFs, EDR, and vulnerability scanners.
Knowledge of network protocols and services, with the ability to understand and explain HTTP requests (methods, headers, and body), the TLS/SSL handshake process, and DNS records and resolution.
Experience automating operational and recurring activities through scripts and API integrations, using technologies such as Python, PowerShell, and security platform APIs (e.g., Cloudflare).
Experience working with clients, including preparing technical and executive reports; leading follow-up and status meetings; and clearly and objectively presenting security risks, impacts, and recommendations.
Bachelor’s degree in Information Security, Computer Networks, Computer Science, Systems Analysis and Development, or a related Information Technology field.