* Salário: R$ 2.000 a R$ 5.000 por mês (estimado)
* O valor exibido é uma estimativa calculada com base em dados públicos e referências do mercado. Não garantimos que este seja o salário oferecido para esta vaga específica.
Área: Outros
Nível: Senior
About Confidencial (Apenas para Cadastrados)
We are a global technology company specializing in digital applications and security. Our platform helps companies operate more agilely, reducing response times and increasing the reliability of their systems.
At Confidencial (Apenas para Cadastrados), our purpose is to simplify application development and transform the future with cutting-edge technology. Here, you will have the chance to develop in an innovative environment, alongside a high-performance team, working on real challenges and creating solutions that make a difference.
About the Position
We are seeking a Senior Cybersecurity Analyst to drive our infrastructure and server security initiatives. This engineer will manage our vulnerability management program, perform penetration testing, and maintain the security posture of our cloud and on-prem environments. This is a hands-on role requiring scripting and automation capabilities.
Key Responsibilities
- Operate the vulnerability management program.
- Design and implement server security solutions (Linux environment).
- Design server configuration and hardening, and collaborate with the SRE and Infrastructure teams to deploy and maintain both.
- Collaborate with SRE to secure infrastructure and server environments across the organization.
- Build AI solutions to be used internally for vulnerability management tasks and procedures.
- Build automation and scripts to reduce friction and speed up work (e.g. infrastructure hardening checks, dashboards, reports).
- Execute infrastructure scans to support current and future compliances (e.g. ASV scan for PCI DSS 4.0).
- Support internal engineering teams with secure-by-design practices.
- Collaborate with the threat intelligence and compliance teams.
Required Qualifications
- Strong knowledge of Linux and cloud security (GCP, AWS, on-prem containers).
- Experience of common security frameworks and CVSS/CVE/CWE projects.
- Knowledge of vulnerability and scanning tools, such as Tenable One, Rapid 7, Nessus.
- Experience conducting penetration tests in infrastructure and server environments.
- Knowledge of OWASP, Mitre Att&ck, and other foundational security projects.
- Hands-on in AI models (Anthropic, OpenAI, Mistral) creating and using MCPs and Skills to amplify vulnerability management tasks and procedures.
- Experience with web application pentesting and vulnerability research.
- Collaborative and organized, with strong communication skills.
- Intermediate/Advanced English proficiency.
Preferred Qualifications
- Proficient in Python and shell scripting.
- Knowledge of PCI DSS 4.0 and SOC 2 frameworks.
- Experience working with end-user environments.
- Experience with software development for Linux.
- MacOS experience.
- Fluent English proficiency.
Benefits & Confidencial (Apenas para Cadastrados) Way of Life
- CLT hiring model;
- Health and dental plan;
- Flexible VR and VA (Flash Card), including during vacation periods;
- Transport voucher without payroll deduction;
- Annual internal hackathons;
- Mobility allowance (additional amount for travel);
- Freestyle (incentive to customize the workstation);
- Stock options (according to policy);
- Birthday day off;
- TotalPass;
- Flexible working hours (really flexible);
- Nomad Program to work from anywhere for up to 30 days per year (according to policy);
- Annual international exchange program.
FlexWork Model
We offer a FlexWork model that prioritizes acculturation and collaboration. For the first three months, you will work on-site in the local office, an essential step in building solid relationships and a genuine connection with our values and culture. We believe that this initial immersion not only strengthens the team, but also boosts creativity and innovation.
After this period, you will have the possibility to apply for the hybrid model, working on-site at least three times a week. This approach balances interaction in person and autonomy, creating a dynamic and productive working environment.
At Confidencial (Apenas para Cadastrados), all applications are welcome, regardless of gender, sexual orientation, age, pregnancy, disability, ethnicity, color, country of origin, or religion. We believe that an inclusive environment contributes to our success and that respect is present in all our relationships.
Come and join our team! We look forward to getting to know you and walking a path of success in technology together!