Security Engineer

• Administer users, access rights, roles, profiles, and authorizations in SAP environments
• Assess and address risks related to security and access controls
• Identify opportunities to strengthen and improve the environment’s security controls
• Support the implementation and optimization of access management processes
• Analyze risks related to access rights, authorizations, and Segregation of Duties (SoD)
• Support compliance, internal controls, and cybersecurity initiatives
• Review and enhance User Administration and Access Management processes
• Support audits and requests related to security and compliance
• Identify and mitigate security risks in the ERP environment
• Contribute to preparing the environment for S/4HANA and compliance requirements
• Work with technical and functional teams to implement security improvements
• Collaborate with international teams and stakeholders on security, risks, and controls

ERP Security and Access Analyst

• Responsible for the Grupo Boticário Group’s Information Security operations
• Define the SecOps strategy based on organizational objectives
• Lead 24/7 operations, modernizing processes through automation and AI
• Lead managers and teams, prioritizing operational efficiency and employee well-being
• Manage the SecOps budget, contracts, SLAs, and vendors
• Respond to complex crises, coordinating with Technology, VPs, Directors, Legal, the DPO, Marketing, and R&D
• Prepare infrastructure and processes for AI-amplified threats
• Define and monitor MTTD, MTTR, SLAs, and efficiency OKRs
• Ensure the stability, observability, and governance of cloud environments, networks, servers, and pipelines
• Lead capacity planning and continuous management of cyber operational risks
• Strategically align partners, service providers, and third parties

SecOps Manager – Information Security Directorate

• Support and enhance Information Security Governance, Risk, and Compliance (GRC) processes
• Ensure compliance with corporate policies, regulatory requirements, internal controls, and industry best practices
• Lead activities involving risk management, audits, metrics, awareness, documentation, third-party management, and tracking of Information Security action plans
• Draft, review, and maintain Information Security policies, standards, procedures, and controls
• Support internal and external audit processes
• Track nonconformities and remediation plans
• Produce evidence for audits and regulatory assessments
• Support initiatives related to ISO 27001, SOX, and other compliance requirements
• Perform cybersecurity risk identification, assessment, and monitoring activities
• Support maintenance of the risk register
• Monitor risk treatment plans and risk acceptances
• Prepare executive reports on the evolution of Information Security risks
• Conduct security assessments of vendors and partners
• Support third-party onboarding and approval processes
• Review Information Security requirements in contracts
• Track remediation activities for critical vendors
• Plan and execute Information Security awareness campaigns
• Coordinate simulated phishing campaigns
• Develop communications and training materials
• Monitor the effectiveness metrics of awareness programs
• Keep departmental documentation up to date
• Structure evidence for audits and certifications
• Support the organization of the repository for processes, controls, and standards
• Ensure compliance with corporate documentation standards
• Consolidate Information Security metrics
• Prepare dashboards and executive presentations
• Track risk, audit, third-party, and awareness metrics
• Support governance forums and internal committees

Senior Information Security Governance Analyst

• Support the monitoring of security alerts and events in corporate tools
• Assist with the initial analysis and triage of security incidents
• Support vulnerability management activities, including tracking remediation efforts and generating reports
• Perform queries, collect, and consolidate information from security tools
• Assist in creating and updating procedures, technical documentation, and departmental metrics
• Contribute to information security awareness and culture initiatives
• Identify opportunities to improve and automate the department’s operational processes

Information Security Intern

• Plan, implement, and maintain security controls in cloud environments
• Perform vulnerability assessments and support the patch management lifecycle for servers, networks, and critical devices in AWS
• Develop and maintain operating system hardening for Linux and Windows systems hosted on AWS, as well as network devices
• Support incident response, log analysis, and threat investigations at Levels 2 and 3
• Conduct security reviews for new Cloud infrastructure projects and applications using CIS AWS Foundations or frameworks such as Well-Architected
• Administer security tools such as firewalls, enterprise antivirus, EDR, SIEM, VPNs, and proxies
• Partner with Infrastructure and Governance teams to ensure adherence to best practices and internal policies

Cloud Security Specialist

• Serve as the technical authority for Information Security, leading the design, implementation, support, and continuous improvement of Firewall, SASE, and network security solutions
• Design, implement, and support next-generation firewall (NGFW) solutions
• Administer, troubleshoot, and optimize security environments
• Analyze and create security policies, NAT, VPNs, routing, and network segmentation
• Work on projects and support SASE/SSE solutions
• Work with ZTNA, SWG, CASB, DLP, SD-WAN, and secure remote access
• Perform advanced connectivity, performance, and security troubleshooting
• Support troubleshooting of TCP/IP, BGP, OSPF, DNS, DHCP, IPsec, and SSL VPN
• Participate in firewall deployment, migration, upgrade, and consolidation projects
• Support the analysis and response to perimeter security and connectivity incidents
• Analyze logs, traffic, sessions, and packets for diagnostic purposes
• Develop architecture recommendations and security improvements
• Serve as the technical point of contact for clients, vendors, and infrastructure and security teams
• Produce technical documentation, procedures, diagrams, and troubleshooting reports
• Support operations teams and N1/N2/N3 support levels

Information Security Consultant, Palo Alto

• Maintain and enhance the Cybersecurity Risk Management Process
• Continuously identify, log, and analyze control nonconformities and unresolved or high-risk vulnerabilities across different sources
• Maintain the Risk Registry
• Deliver timely risk treatment updates and reports to stakeholders
• Execute annual third-party cybersecurity risk assessments aligned with internal risk standards and external compliance requirements
• Maintain and enhance the cybersecurity control framework
• Map existing controls and collect evidence of execution
• Identify gaps and nonconformities
• Align overlapping requirements under a unified structure
• Ensure adherence to HITRUST, HIPAA, and Spain ENS certification frameworks
• Create and maintain cybersecurity-related policies and procedures
• Ensure documentation complies with regulatory and contractual standards

Senior GRC Security Specialist

• Drive revenue growth and market share for HPE Networking Cybersecurity solutions across the assigned territory
• Identify, qualify, and develop new business opportunities while expanding existing customer relationships
• Build and execute strategic account plans aligned with customer business priorities
• Lead cybersecurity-focused sales motions from discovery through closure, coordinating sales, partner, and technical resources
• Achieve or exceed sales targets, pipeline generation goals, and forecast commitments
• Engage CIOs, CISOs, security leaders, networking leaders, and line-of-business stakeholders
• Understand customer challenges, risk posture, and digital transformation initiatives to position cybersecurity solutions
• Conduct executive conversations about cyber resilience, Zero Trust, secure networking, and AI-related security challenges
• Advise customers on cybersecurity roadmaps aligned with strategic objectives
• Develop territory and account strategies with HPE Networking account teams
• Identify whitespace opportunities and maintain a healthy pipeline
• Drive account-based selling motions within broader HPE engagements
• Build relationships with channel partners, systems integrators, MSSPs, distributors, and strategic alliances
• Enable partners to identify, position, and deliver HPE cybersecurity solutions
• Jointly develop pipeline, customer engagements, and go-to-market initiatives with partners
• Contribute to the growth and evolution of HPE’s cybersecurity business
• Establish repeatable sales plays, customer success stories, and best practices
• Monitor cybersecurity trends, competitive landscapes, regulations, and emerging technologies

Cybersecurity Sales Specialist – Brasil Enterprise

• Drive revenue growth and market share for HPE Networking Cybersecurity solutions across the assigned territory
• Identify, qualify, and develop new business opportunities and expand existing customer relationships
• Build and execute strategic account plans aligned with customer business priorities
• Lead cybersecurity-focused sales motions from discovery through closure
• Coordinate resources across sales, partners, and technical teams
• Achieve or exceed sales targets, pipeline generation goals, and forecast commitments
• Engage CIOs, CISOs, security leaders, networking leaders, and line-of-business stakeholders
• Position cybersecurity solutions based on customer challenges, risk posture, and digital transformation initiatives
• Conduct executive conversations on cyber resilience, Zero Trust, secure networking, and AI-related security challenges
• Advise customers on cybersecurity roadmaps
• Develop territory and account strategies and identify whitespace opportunities
• Maintain a healthy pipeline through proactive business development
• Build relationships with channel partners, systems integrators, MSSPs, distributors, and strategic alliances
• Enable partners to identify, position, and deliver HPE cybersecurity solutions
• Jointly develop pipeline, customer engagements, and go-to-market initiatives
• Contribute to HPE’s cybersecurity business, sales plays, customer success stories, and best practices
• Stay current on cybersecurity trends, competitive landscapes, regulations, and emerging technologies

• Drive revenue growth and market share for HPE Networking Cybersecurity solutions across the assigned territory
• Identify, qualify, and develop new business opportunities while expanding existing customer relationships
• Build and execute strategic account plans aligned with cybersecurity outcomes and customer business priorities
• Lead cybersecurity-focused sales motions from discovery through closure, coordinating sales, partner, and technical resources
• Achieve or exceed sales targets, pipeline generation goals, and forecast commitments
• Engage CIOs, CISOs, security leaders, networking leaders, and line-of-business stakeholders
• Understand customer challenges, risk posture, and digital transformation initiatives to position cybersecurity solutions
• Conduct executive conversations about business outcomes, cyber resilience, Zero Trust, secure networking, and AI-related security challenges
• Serve as a trusted advisor and help customers build cybersecurity roadmaps
• Develop territory and account strategies with HPE Networking account teams
• Identify whitespace opportunities and maintain a healthy pipeline through proactive business development
• Drive account-based selling motions integrating cybersecurity opportunities into broader HPE engagements
• Build relationships with channel partners, systems integrators, MSSPs, distributors, and strategic alliances
• Enable partners to identify, position, and deliver HPE cybersecurity solutions
• Jointly develop pipeline, customer engagements, and go-to-market initiatives with partners
• Contribute to the growth and evolution of HPE's cybersecurity business
• Establish repeatable sales plays, customer success stories, and best practices
• Stay current on cybersecurity trends, competitive landscapes, regulatory developments, and emerging technologies
• Help define new approaches in a rapidly evolving market