CEA

• Work in high-criticality production environments, supporting our internal and external technology clients, both for ongoing support and new projects. • Proven knowledge and experience in support and management of Oracle, MySQL and PostgreSQL databases. • Sense of ownership and governance of environments, always seeking to ensure their health and performance. • Hands-on, proactive profile with strong planning skills for activities. • Good communication and interpersonal skills with colleagues within the area and with other teams.

• Develop and maintain applications using Java and the Quarkus framework; • Conduct analysis, elicitation and understanding of business requirements; • Translate business needs into efficient technical solutions; • Ensure code quality by applying development best practices; • Participate in code reviews and support the team's technical evolution; • Investigate and resolve issues in a structured, proactive manner; • Collaborate with cross-functional teams to ensure aligned and consistent deliveries; • Manage multiple tasks and stay organized to maintain visibility of priorities;

• Ensure results by taking ownership through data analysis and process improvements • Management of performance indicators (KPIs) • Results-oriented • Parameterization of the credit engine.

• Elaborar diagramas técnicos, documentos de arquitetura e modelos de ameaça • Analisar arquiteturas de sistemas, aplicações e integrações sob a ótica de segurança • Realizar análises de risco técnico e recomendar controles de segurança • Atuar no desenho de soluções seguras para cloud, aplicações e infraestrutura • Apoiar times de desenvolvimento, infraestrutura e DevOps na implementação de controles • Avaliar configurações de segurança (hardening, baseline, CIS Benchmarks) • Apoiar processos de auditoria, compliance e gestão de vulnerabilidades • Efetuar modelagem de ameaças, análise de risco e sugestões de sistemas internos e fornecedores • Conhecimento avançado em OWASP Top 10, CWE, NIST e padrões de segurança • Conhecimento em code reviews com foco em segurança para apoiar times de desenvolvimento na correção de vulnerabilidades • Desenvolver scripts e automações para análise e mitigação de vulnerabilidades

• Solid experience in software development and software engineering practices. • Advanced experience building, maintaining and optimizing CI/CD pipelines using YAML. • Hands-on experience with Git and strategies for versioning, branching and release management. • Experience with containerization using Docker and container orchestration with Kubernetes. • Experience implementing and automating unit, integration, regression tests and quality validations in CI/CD pipelines. • Proven experience with Azure DevOps and GitHub, including Azure Pipelines, GitHub Actions and repository management. • Knowledge of DevSecOps practices, including vulnerability analysis, secret management and security controls in pipelines.

• Administer, sustain, and evolve corporate Observability environments with Zabbix, ensuring platform availability, performance, scalability, and reliability; • Act as a technical reference at the 3rd level for maintaining the monitoring infrastructure, supporting internal teams, vendors, and strategic partners; • Serve and advise internal clients, understanding technical and business requirements to propose appropriate monitoring solutions; • Identify, propose, and implement improvements to templates, triggers, items, dashboards, discovery rules, alerts, escalations, maps, integrations, and automations; • Support management of infrastructure, application, and service availability through continuous monitoring of metrics, events, and performance indicators; • Participate in War Rooms, critical incidents, and root cause analyses, proposing new monitoring or adjustments to existing checks; • Develop advanced monitoring using preprocessing, LLD, JavaScript, the Zabbix API, and the Zabbix database when necessary; • Work on medium- and high-complexity projects related to Observability; • Ensure adherence to IT governance processes, and to incident, problem, change, capacity, and availability management; • Monitor, optimize, and provide support when necessary for the Zabbix platform itself, including Server, Frontend, Database, Proxies, Agents, SNMP, traps, internal queues, and process performance;

• Develop, test, and maintain applications with a predominant focus on back-end, ensuring performance, scalability, and security; • Design and implement APIs, services, and integrations between internal and external systems; • Participate in software architecture definition, contributing technical decisions and best practices; • Optimize database queries and ensure efficient handling of large volumes of data; • Ensure code quality through automated tests, code reviews, and use of development standards; • Monitor, diagnose, and fix production issues, ensuring application stability and high availability; • Collaborate with front-end, product, QA, and infrastructure teams to deliver complete, integrated solutions; • Participate in agile ceremonies (planning, daily standups, review, retrospective), contributing estimates and timelines; • Document technical solutions, APIs, and processes to support system maintenance and evolution; • Support and mentor junior developers, sharing knowledge and promoting best practices;

• Support ensuring compliance with information security policies and regulations; • Support governance activities with business and Technology areas for matters related to information security and cyber risks; • Assist in creating and formatting security-related documents that require frequent updates, modifications, storage, and availability for reference and audit purposes; • Work closely with other information security teams to ensure the overall effectiveness of C&A's information security program; • Support the process of assessing vendors' information security maturity; • Assist with information security awareness initiatives for employees and third parties; • Support the development and measurement of information security metrics;

• Serve as the analytical point of reference for expansion and engineering • Structure, govern, and analyze Master Plan data • Translate complex information into strategic insights for senior leadership • Support critical decisions on expansion, refurbishments, and investments

• Develop and implement statistical, predictive and prescriptive models to optimize processes related to workforce management. • Explore and analyze large volumes of data to identify patterns, trends and improvement opportunities. • Create and validate optimization models for complex problems such as resource allocation, scheduling and capacity planning. • Collaborate with multidisciplinary teams (IT, Operations, Business) to translate challenges into data-driven solutions. • Ensure quality, governance and documentation of developed models and pipelines. • Support the definition of metrics and KPIs for performance monitoring.