Portobello logo
Portobello

Exciting New Fashion Game - forward Thinking in a Changing World

Mid-level Information Security Analyst – Vulnerability and Identity Management

Security AnalystSecurity AnalystFull TimeRemoteSeniorTeam 1-10Since 2020H1B No SponsorCompany SiteLinkedIn

Location

Brazil

Posted

4 days ago

Salary

0

Seniority

Senior

Job Description

Mid-level Information Security Analyst – Vulnerability and Identity Management

Portobello

• Execute the Vulnerability Management lifecycle: analyze scan results, prioritize based on risk, and coordinate and track remediation with the responsible teams (Infrastructure, Systems, etc.). • Maintain, update and improve operational indicators and remediation workbooks (agent coverage, severity, monitoring of remediation SLAs). • Operate Identity and Access Management (IAM) processes: provisioning, deprovisioning, privilege granting, periodic access reviews and support for MFA mechanisms. • Actively support corporate access review campaigns and validation of segregation of duties (SoD). • Monitor, classify and investigate alerts generated by the security tools within your scope. • Perform initial triage and analysis of security incidents, escalating to a Specialist when necessary. • Produce periodic operational reports and security metrics for your area of responsibility. • Prepare and keep technical documentation and Standard Operating Procedures (SOPs) up to date.

Job Requirements

  • Professional experience in Information Security, Infrastructure, Systems Administration or related areas with a security focus.
  • Hands-on experience with Vulnerability Management processes and the use of market scanning tools (Qualys, Tenable, Rapid7 or equivalents).
  • Solid knowledge of Active Directory, IAM, SSO and MFA solutions.
  • Practical experience monitoring and triaging alerts on SIEM platforms.
  • Knowledge of TCP/IP networking, segmentation and communication protocols.
  • Basic administration knowledge of Windows and Linux environments.
  • Proven technical analysis skills and attention to documenting activities.
  • Strong analytical skills and meticulous attention to detail.
  • Organization, discipline and focus on executing standardized processes.
  • Good communication skills for daily interaction with technical teams and business areas.
  • Sense of responsibility and interest in continuous learning.
  • Preferred/Additional:
  • Specific experience with Wazuh, Elastic Stack (ELK) or other open-source SIEM platforms.
  • Knowledge of the ISO/IEC 27001 and CIS Controls frameworks.
  • Knowledge of LGPD (Brazilian Data Protection Law) as applied to logs, identities and personal data protection in security tools.
  • Basic scripting knowledge (PowerShell, Bash or Python) for automating routine tasks.
  • Entry-level certifications in Information Security (e.g.: Security+, CySA+, Microsoft SC-900/SC-300).

Benefits

  • Life insurance
  • Health and dental plans
  • Portobello Corporate University platform
  • Profit Sharing (PPR)
  • Discounts at local pharmacies
  • Private pension plan
  • Union membership
  • Discount network — partnerships with various educational institutions
  • Discounts on Portobello product purchases
  • Vacation bonus
  • "Portobello Mom" allowance — for purchasing a baby layette
  • Daycare allowance
  • Assistance for dependents with disabilities
  • Professional training and development programs
  • Wellhub and many more

Related Job Pages

More Security Analyst Jobs

GuidePoint Security logo

Security Analyst – Mid-Atlantic region

GuidePoint Security

We help organizations make smarter cybersecurity decisions that minimize risk.

Full TimeRemoteTeam 201-500H1B Sponsor

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. • Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond. • Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors. • Looking for a candidate currently living in the eastern time zone (EST)

Connecticut + 8 moreAll locations: Connecticut | New Jersey | New York | Maryland | Massachusetts | Pennsylvania | Rhode Island | Virginia | West Virginia
Full TimeRemoteTeam 1,001-5,000H1B No Sponsor

• Manage and maintain vulnerability scanning operations using commercial and open-source security tools across enterprise infrastructure, cloud environments, operating systems, applications, and externally exposed services • Monitor threat intelligence feeds, vendor advisories, security research, and emerging vulnerabilities to identify risks impacting Intermedia systems and escalate critical threats appropriately • Work directly with infrastructure, operations, engineering, and application teams to develop practical remediation and mitigation plans for identified vulnerabilities • Track remediation progress against defined SLAs, follow up on overdue items, and communicate risk and remediation status to leadership through metrics and reporting • Maintain and support vulnerability management platform, scanner infrastructure, cloud integrations, asset inventory integrations, and related automation workflows • Maintain vulnerability management procedures, standards, documentation, and operational processes to ensure accuracy, consistency, and alignment with security best practices • Collaborate with Security Operations and Incident Response teams during security investigations, threat analysis, incident response activities, and remediation efforts • Assist with identifying unmanaged, unsupported, or non-compliant systems through asset inventory analysis and vulnerability assessment activities • Support audit, compliance, and governance activities by maintaining accurate remediation records, exception tracking, and supporting documentation

Portugal
€45K - €55K / year
Monzo Bank logo

Security Awareness Analyst

Monzo Bank

We're a bank that lives on your phone, on a mission to make money work for everyone.

Part TimeRemoteTeam 1,001-5,000Since 2015H1B No Sponsor

• Create engaging security awareness content across channels including Slack, email, presentations, training, and events. • Develop micro-learning, behavioural nudges, and awareness campaigns that encourage secure habits across Monzo. • Manage the day-to-day delivery of the security awareness programme, including campaigns, content, documentation, and reporting. • Translate complex security topics into clear, practical guidance that helps Monzonauts make confident decisions. • Use behavioural insights, metrics, and user feedback to continuously improve security awareness and influence the roadmap. • Partner with Security, People, Tech, Risk, and Customer Operations to improve security behaviours, reduce user friction, and communicate emerging threats.

United Kingdom
£40K - £50K / year

Disaster Recovery Analyst

Mastech Digital

Mastech Digital delivers IT staffing services and digital transformation services for companies across the United States and beyond. The specialist staffing com

Title: Disaster Recovery Analyst Location: Dallas, TX Job Code: 301436 Job Description: Mastech Digital provides digital and mainstream technology staff as well as Digital Transformation Services for all American Corporations. We are currently seeking a Disaster Recovery Analyst for our client in the Software domain. We value our professionals, providing comprehensive benefits and the opportunity for growth. This is a Contract position, and the client is looking for someone to start immediately. Duration: 12 Months Contract with possible extension Location: Dallas, TX (Remote) Salary: $60.00-$70.00/Hourly Role: Disaster Recovery Analyst Primary Skills: “DISASTER RECOVERY”, Ransomware, Air Vault, DRP, Disaster Recovery policies Role Description: The Disaster Recovery Analyst must have 4+ years of experience. Required Qualifications: - 4+ years of similar or related experience in such fields as Disaster Recovery, Business Continuity and Enterprise Operational Resilience. - Working knowledge of Disaster Recovery professional practices, including Business Impact Analysis, disaster recovery plan (DRP), redundancy and failover mechanisms DR related regulatory requirement, and Business Continuity Plan exercises and audits. - Ability to motivate, influence, and train others. Education: Any Experience: Minimum 4+ years of experience Relocation: This position will not cover relocation expenses Travel: No Local Preferred: Yes Note: Must be able to work on a W2 basis (No C2C) Benefits: We have various coverages and additional benefits to choose from: - Medical, Dental (Including Ortho) & Vision Insurance (Option to Enroll). - Paid Leaves (Wherever applicable). - Life & Disability Coverage (Upon eligibility). - 401K Option, Education Assistance Program and more.

Texas
$60 - $70 / hour