Security Analyst

• Administer, configure, monitor, and enhance Web Application Firewall (WAF) and application and API protection solutions
• Create, fine-tune, and maintain policies, rules, signatures, exception lists, and protection profiles
• Conduct tuning and reduce false positives, tracking impacts with business, product, and development teams
• Analyze Layer 7 events and blocks, identifying attacks, vulnerability exploitation, API abuse, scraping, and bots
• Support controls against L7 DDoS, OWASP Top 10 threats, credential stuffing, enumeration, and feature abuse
• Participate in onboarding applications, domains, and APIs onto protection solutions
• Track effectiveness, coverage, blocking volume, and policy maturity metrics
• Participate in digital certificate management, including mTLS, TLS, eCPF, and eCNPJ
• Support the administration, monitoring, and maintenance of HSMs, including cryptographic key lifecycle management and integrations
• Maintain, administer, and optimize security tools in the environment
• Support security monitoring, triage, investigation, and incident response
• Contribute to detection engineering, use cases, rules, and visibility improvements
• Support hardening, attack surface reduction, vulnerability remediation, and configuration strengthening
• Participate in technical incident analysis, root-cause analysis, containment, eradication, lessons learned, and war rooms
• Collaborate with Infrastructure, Networks, Cloud, Architecture, AppSec, DevSecOps, CSIRT, and vendors
• Prepare and maintain technical documentation, procedures, runbooks, and configuration standards
• Support audits, regulatory requests, and evidence curation
• Serve as a technical reference for junior and mid-level analysts through mentoring and technical reviews
• Support solution assessments, proof-of-concept initiatives, and evolution roadmaps
• Contribute to continuous improvement, routine automation, and delivery standardization

Information Security Analyst III – Security Operations, WAF, AppSec

• Support Information Security Governance, Privacy, and Risk Management activities
• Assist with assessments, diagnoses, and action plan follow-up
• Support initiatives related to Brazil’s General Data Protection Law (LGPD), internal policies, and regulatory requirements
• Contribute to the development and updating of policies, procedures, metrics, and reports
• Assist with vendor management and the coordination of the department’s administrative requests
• Participate in organizing and delivering information security awareness campaigns and training
• Support collaboration between business and technology teams in implementing controls and improvements
• Monitor, record, and document the department’s processes

Information Security Analyst

• Lead penetration testing, Red Team Assessment, and security assessment projects for clients across various industries
• Provide technical leadership throughout project execution, ensuring adherence to agreed scopes and timelines
• Plan and conduct penetration tests across web applications, APIs, mobile applications, infrastructure, and internal and external networks
• Execute Red Team Assessment projects to evaluate clients’ ability to prevent, detect, and respond to simulated attacks
• Plan attack scenarios, objectives, and rules of engagement
• Identify, manually exploit, and validate vulnerabilities
• Conduct security assessments using industry-standard methodologies
• Analyze evidence and validate the technical impact of vulnerabilities
• Develop and adapt scripts and automation to support testing activities
• Prepare technical and executive reports covering vulnerabilities, evidence, risks, impact, and recommendations
• Present findings to clients’ technical teams, managers, and stakeholders
• Participate in kickoff meetings, technical alignment sessions, and results presentations
• Conduct retesting to validate vulnerability remediation
• Translate technical findings into business risks and practical recommendations
• Support the commercial team in defining scopes and estimating effort for new projects
• Mentor less experienced professionals and review their deliverables
• Research new techniques, vulnerabilities, tools, and offensive security trends
• Contribute to improvements in the department’s methodologies, processes, and automation

Senior Offensive Security Analyst – Red Team

• Perform penetration testing on web applications, APIs, mobile applications, infrastructure, and internal and external networks
• Participate in Red Team Assessment projects, supporting attack scenarios defined with the team
• Identify, manually exploit, and validate vulnerabilities
• Apply industry-standard methodologies in security assessments
• Analyze evidence and validate the technical impact of vulnerabilities
• Develop and adapt scripts to support testing activities
• Prepare technical reports covering vulnerabilities, evidence, risks, impact, and remediation recommendations
• Support the preparation of executive reports
• Participate in kickoff meetings, technical alignment sessions, and results presentations
• Present technical findings to client teams
• Conduct retesting to validate remediation efforts
• Research new techniques, vulnerabilities, and offensive security tools
• Contribute to improvements in the department’s methodologies, processes, and automation

Mid-Level Offensive Security Analyst – Red Team

• Support LGPD and Privacy initiatives, including personal data mapping, responding to data subject rights requests (DSRs), and conducting data protection-related contract reviews
• Lead Privacy by Design and Security by Design assessments for projects and new solutions
• Maintain and continuously improve the Information Security Management System (ISMS), supporting ongoing compliance with ISO 27001
• Plan and conduct internal audits, gather evidence, document nonconformities, and monitor the related action plans
• Draft, review, and maintain up-to-date Information Security and Privacy policies, standards, and procedures
• Manage the Information Security and Privacy risk management lifecycle, from identification through treatment and monitoring
• Conduct risk assessments for vendors, partners, and new solutions
• Serve as the focal point for customer and regulatory audits
• Monitor risk and compliance indicators, including KPIs and KRIs, supporting the preparation of reports and executive presentations
• Provide internal consulting to business areas and support Information Security and Privacy awareness initiatives

Senior Information Security Analyst

• Support the Information Security team in developing, reviewing, and implementing security policies and procedures
• Perform basic server analyses and support the implementation of security fixes and patches
• Support basic hardening activities on servers and workstations
• Provide employees with support on Information Security matters
• Assist and advise DPOnet clients with Information Security requirements, addressing technical questions and recommending best practices
• Support clients and the organization in aligning with security frameworks and standards, such as ISO 27001 and ISO 27701
• Help protect the confidentiality, integrity, and availability of data and systems
• Help prevent attacks, reduce vulnerabilities, and protect sensitive data

• Develop and implement information security policies, procedures, and awareness programs
• Collaborate in identifying and responding to security incidents
• Support departments in adopting secure practices, mitigating risks, and protecting against internal and external threats
• Work with cross-functional teams to promote a culture of information security
• Provide specialized guidance and technical support
• Prepare, review, and maintain information security policies, procedures, and guidelines
• Implement and audit security processes, ensuring effectiveness and compliance
• Develop and deliver awareness programs for all levels of the organization
• Conduct vulnerability assessments and manage information security incidents
• Support business units and technical teams in implementing and managing security controls
• Act as a champion for the security culture
• Recommend improvements to information security processes, policies, and procedures

Information Security Analyst (Mid-Level) – Governance

• Monitor events, logs, and alerts in real time to identify suspicious activity or incidents
• Support the triage, analysis, and response to cybersecurity incidents
• Assist with vulnerability management cycles, including identification, risk analysis, and remediation tracking
• Conduct security risk assessments and evaluate compliance with internal standards and policies
• Participate in projects focused on system security and data protection under Brazil’s LGPD
• Prepare technical reports and dashboards, and track information security metrics and KPIs
• Plan and deliver security education initiatives and awareness campaigns for employees
• Protect information assets and technology infrastructure by supporting the implementation, operation, and monitoring of security controls and policies

• Handle configuration requests, incidents, planned tasks, and issues related to network security
• Gather information from clients and internal teams, such as the NOC and SOC
• Develop analytical reports or RCAs and prepare technical assessments
• Review reports prepared by other analysts, ensuring clear and formal communication
• Ensure SLA compliance through the handling, logging, and resolution of requests
• Support teams in implementing new features and propose improvements to processes and practices
• Conduct routine security and asset health checks
• Create and maintain an up-to-date knowledge base and document completed activities
• Analyze and process security incidents, determining the best approach for resolution
• Contribute to improvements in security and technical support processes with Security and Infrastructure teams
• Monitor and support the procurement team with equipment licensing

Network Cybersecurity Analyst

• Install and configure equipment for projects involving Cisco Security technologies
• Configure and troubleshoot Cisco firewalls, VPNs, and firewall rules
• Work with Layer 2 and Layer 3 network equipment and routing protocols
• Work on-site or remotely at client locations, following the project plans established by the technical leads
• Prepare daily reports and the project closeout document
• Prepare pre-implementation documentation by gathering data from technical proposals and information about clients’ network environments
• Participate in kickoff meetings, gathering information about the environment and assisting in the validation of minimum and essential requirements
• Prepare post-implementation documentation detailing configurations, topology, protocols, software versions, and IP addressing
• Open support tickets and engage technical assistance for hardware or software issues and product bugs
• Configure access to clients’ network environments, analyze topologies and technologies, identify failures, and propose improvements

Security Analyst jobs in Brazil

Information Security Analyst III – Security Operations, WAF, AppSec

Information Security Analyst

Senior Offensive Security Analyst – Red Team

Mid-Level Offensive Security Analyst – Red Team

Senior Information Security Analyst

Information Security Analyst

Information Security Analyst (Mid-Level) – Governance

Information Security Analyst

Network Cybersecurity Analyst

Mid-Level Security Analyst