ALTASNET

• Participate in architecture and design reviews across the AMI product stack — metering devices, RF/cellular modules, gateways, cloud pipelines and SaaS portals — providing security guidance from the early stages of the development lifecycle. • Perform threat modeling (STRIDE, PASTA) across the AMI architecture, identifying attack surfaces and trust boundaries from the meter to the cloud. • Support firmware security standards and coordinate security testing of metering hardware, including firmware extraction/analysis and review of supply chain components. • Work with Cloud and DevOps teams to embed security controls into Infrastructure as Code (IaC) templates and CI/CD pipelines. • Execute or coordinate SAST, DAST and SCA testing in the CI/CD pipelines of NTG’s utility management applications and consumer portals. • Assess authentication, authorization and API security in multi-tenant SaaS portals intended for utility administrators, end customers and integration partners. • Serve as the primary point of contact between Security & Compliance and Product Development, ensuring requirements are implemented in practice — not just documented — and supporting evidence collection for audits across firmware, cloud and SaaS. • Provide technical support during product security incidents and post-incident reviews, converting findings into architectural improvements or engineering backlog items.

• Provide support in the implementation, maintenance, and evolution of ServiceNow security and risk solutions; • Provide basic technical support for the implementation and configuration of software or infrastructure solutions; • Manage backlog and roadmap based on data and user feedback; • Analyze data, perform benchmarking, and contribute to product hypothesis testing.

• Assist in designing and reviewing secure cloud architectures, landing zones, and guardrails in AWS and Azure environments. • Assess and recommend reference architectures and reusable security patterns aligned with standards and the risk posture. • Support the implementation and configuration of native cloud and third-party security controls, including IAM, CSPM, logging, and security posture management. • Assist in translating regulatory and internal security requirements into applicable technical controls within AWS and Azure environments. • Review logs, telemetry, and CSPM tool findings to identify issues that require remediation or architectural adjustments. • Assist in audit preparation by producing architectural artifacts, control evidence, and technical explanations. • Provide technical support during cloud-related security incidents, including scoping, investigation, and containment guidance.

• Foco em Gerenciamento de Firewalls: Planejar, implementar e gerenciar firewalls de última geração (NGFW), incluindo as marcas Fortinet; • Desenvolver, revisar e otimizar regras e políticas de firewall para garantir o mínimo de privilégios e a máxima segurança; • Monitorar o tráfego de rede e os logs de firewall para identificar e responder a ameaças e atividades suspeitas em tempo real; • Realizar troubleshooting complexo de problemas de conectividade e desempenho relacionados ao firewall; • Administrar outras ferramentas de segurança de perímetro, como sistemas de prevenção de intrusões (IPS), VPNs (Virtual Private Networks), filtragem de conteúdo web e sandboxing; • Integrar firewalls com outras ferramentas de segurança (SIEM, EDR) para uma visão centralizada e automatizada de ameaças; • Conduzir a implementação e configuração de VPNs Site-to-Site e Remote Access para garantir a comunicação segura; • Realizar análises forenses básicas em logs e eventos para entender a causa raiz dos incidentes. Elaborar relatórios detalhados sobre incidentes, vulnerabilidades e o estado geral da segurança do perímetro.