Role Description Lakeside Software is looking for a skilled Cybersecurity Analyst to strengthen our defenses and safeguard the integrity, confidentiality, and availability of our Azure cloud services and information systems. This role calls for a proactive, detail-oriented professional with a solid understanding of current cybersecurity threats and the ability to communicate clearly with stakeholders at all levels. You'll join a collaborative, forward-thinking team committed to protecting what matters most. What You'll Do - Conduct comprehensive security assessments to identify potential vulnerabilities in our Azure systems, networks, and applications. - Use Endpoint Device Management (EDM) solutions to remediate identified vulnerabilities through automated patch deployment. - Collaborate with engineering teams to address vulnerabilities that fall outside the scope of automated patching. - Utilize industry standard tools and methodologies to perform assessments and identify security gaps. - Execute regular vulnerability scans to uncover security weaknesses and ensure compliance with security policies and regulations. - Analyze scan results, prioritize vulnerabilities based on risk, and recommend corrective actions. - Monitor and review Indicators of Compromise (IOC) to detect and respond to potential security incidents. - Analyze threat intelligence and perform investigations to prevent or mitigate security breaches. - Collaborate with internal teams and external partners to contain and resolve security threats promptly. - Perform routine review of alerts and security logs to identify anomalous activity, escalate confirmed incidents, and maintain documentation of findings. - Conduct and document periodic user access reviews across systems and applications to support least-privilege controls and satisfy audit requirements. - Assist in responding to customer and prospect security questionnaires, including DDQs and vendor risk assessments, by accurately documenting Lakeside’s controls, certifications, and security practices in alignment with our security program and approved disclosure posture. - Performing special projects as required. Qualifications - Bachelor's degree in computer science or a related field, or equivalent experience. - 3+ years of experience in information security. - Strong technical documentation skills. - Hands-on experience with vulnerability scanning tools such as Tenable Nessus, Snyk Burpsuite, or equivalent. - Solid knowledge of cybersecurity frameworks and standards, including SOC 2, ISO 27001, and CIS. - Familiarity with information security features across Microsoft Windows, Linux, and macOS. - Experience managing Entra ID, EDM - Intune and Jamf, and EDR solutions. - Working knowledge of ITIL and NIST best practices. - Experience with threat detection and incident response, including analyzing and responding to IOCs. - Experience configuring and operating security tools including SIEM, WAF, EDR, and SASE platforms. Requirements - Knowledge of Azure Cloud Services. - Cloud security. Benefits - 20 Days Annual Leave. - 45 Days Annual Leave Maximum. - 4 Festival Days Named. - 8 Festival Days Select. - 12 Days Sick Leave. - 100% Paid Medical Insurance & GPA. - Wellness Programme. - 3x CTC Group Life Insurance. - Pension. - Employee Referral Scheme.

• Gestão e acompanhamento de vulnerabilidades; • Monitoramento e investigação de eventos de segurança; • Apoio na operação e evolução de soluções SIEM; • Gestão de identidades e acessos (IAM); • Apoio na implementação de controles de segurança em ambientes Cloud AWS; • Participação em análises e tratamento de incidentes de segurança; • Elaboração e manutenção de políticas, procedimentos e controles de segurança; • Apoio às iniciativas relacionadas à LGPD e boas práticas de governança; • Interação com times técnicos para evolução contínua da postura de segurança da organização.

• Monitor enterprise infrastructure, investigate security events, manage vulnerabilities, and support incident response activities. • Develop and fine-tune detection rules for XDR platforms, analyse security alerts, coordinate remediation efforts, and collaborate with engineering teams to integrate Threat Modeling into the Software Development Lifecycle (SDLC). • Contribute to security guidelines, automate operational processes through scripting, and build integrations between security platforms using Infrastructure as Code (IaC) principles and APIs.

• Triage, validate, and QA findings surfaced by Sprocket's automation. Reproduce, confirm true positives, and eliminate false positives before anything reaches a client. • Author and refine findings to client-ready quality in the Sprocket voice, and publish them through the platform. • Calibrate severity to real business impact against Sprocket's standards, judging real-world impact over theoretical. • Handle roughly 90% of findings independently and make accurate handle-versus-escalate decisions using the platform workflow, escalating the hard 10% to an Adversarial Engineer with full context attached. • Feed pattern-level signal back to R&D and the Adversarial Engineering team to tune attack automations and cut false positives at the source. You'll be one of the tightest feedback loops we have into R&D. • Log validation notes, flag false-positive patterns, and contribute to the knowledge base. • Script away repetitive validation steps wherever they appear. • Partner with your fellow R&D team members and the Service Delivery team on the automation feedback loop and client-experience improvements. • Seek to programmatically enhance automation pipeline with new or updated capabilities when triage is complete and capacity allows, pairing with an Adversarial Engineer as needed. • Attend daily standups, weekly 1:1s, monthly company calls, and all-hands.