Garantindo a Cyber Segurança de nossos amigos e clientes !
Vulnerability Analyst
Location
Brazil
Posted
2 days ago
Salary
0
Seniority
Senior
Job Description
Vulnerability Analyst
It4us Cyber Security
• Manage the full lifecycle of vulnerabilities in operating systems, applications, and other assets • Identify, analyze, and prioritize vulnerabilities using industry-recognized methodologies • Assess the impact, severity, and risk of vulnerabilities, converting this information into clear indicators to support decision-making • Route vulnerabilities to the responsible teams and monitor remediation plans and deadlines • Provide technical support to teams during the vulnerability remediation process • Monitor metrics, track SLAs, and escalate to leadership when necessary • Support the continuous improvement of Vulnerability Management processes and the organization’s security posture
Job Requirements
- Practical experience identifying, prioritizing, and tracking the lifecycle of vulnerabilities across multiple platforms (operating systems, applications, etc.)
- Experience with CVSS (Common Vulnerability Scoring System)
- Experience with EPSS (Exploit Prediction Scoring System)
- Experience with SSVC (Stakeholder-Specific Vulnerability Categorization)
- Experience with CISA KEV (Known Exploited Vulnerabilities)
- Ability to perform detailed impact and threat analysis related to vulnerabilities and translate results into clear, actionable risk indicators
- Ability to assign vulnerabilities to the teams responsible for remediation based on technical criteria and strategic prioritization
- Provide technical support to teams to help them understand and remediate vulnerabilities
- Proactive in engaging and following up with leadership when established mitigation or remediation deadlines are not met
Benefits
- Structured career plan (semi-annual and/or annual reviews)
- Support for courses and technical certifications
- 100% online medical care (telemedicine, specialists, nutrition, and psychology)
- Life insurance
- Accounting support for MEI (Individual Microentrepreneur)
- Day off during your birthday month
- Paid time off after one year of service
Related Guides
Related Categories
Related Job Pages
More Security Analyst Jobs
• Lead cyber operations planning and cybersecurity evaluation • Conduct cybersecurity testing using automated vulnerability scanning tools • Analyze system configurations and remediate findings • Develop and maintain cybersecurity frameworks across various systems • Provide comprehensive system administration support across multiple platforms • Design, deploy, and maintain cybersecurity tools and technologies • Collaborate with engineering and cybersecurity teams to ensure effective system performance • Provide technical guidance and troubleshooting support to customers and stakeholders
Analista Sênior de Governança de Tecnologia e Cibersegurança
ExperianWe're unlocking the power of data to help create a better tomorrow.
• Coordenar atividades de governança relacionadas a programas estratégicos de Tecnologia e Cibersegurança. • Facilitar reuniões de governança, fóruns executivos e sessões de acompanhamento com equipes multidisciplinares. • Monitorar riscos, dependências, marcos, entregas e planos de ação dos programas sob sua responsabilidade. • Desenvolver, manter e evoluir KPIs, dashboards, scorecards e relatórios executivos. • Garantir a qualidade, consistência e atualização da documentação e dos artefatos de governança. • Apoiar processos de priorização e tomada de decisão baseados em riscos. • Apoiar a governança do Programa de Gestão de Vulnerabilidades da LATAM. • Coordenar o acompanhamento das ações de remediação junto às equipes de tecnologia e negócio. • Monitorar indicadores de exposição, desempenho de remediação e aderência aos SLAs estabelecidos. • Apoiar processos de avaliação e priorização de vulnerabilidades com base em riscos. • Identificar oportunidades de melhoria contínua para aumentar a maturidade e eficácia do programa. • Apoiar avaliações de tecnologia, segurança e governança durante processos de aquisição de empresas. • Coordenar atividades de governança relacionadas à integração tecnológica pós-aquisição. • Acompanhar workstreams de integração envolvendo infraestrutura, aplicações, identidade e acessos, controles de segurança e processos operacionais. • Apoiar a adequação de ambientes adquiridos aos padrões corporativos de tecnologia e segurança. • Consolidar indicadores, riscos, dependências, status de integração e reportes executivos. • Manter documentação, evidências e registros relacionados aos programas de integração. • Utilizar recursos de Inteligência Artificial (IA) e automação para aumentar a eficiência operacional, a qualidade dos relatórios e a tomada de decisão. • Promover iniciativas de melhoria contínua nos processos de governança, acompanhamento e gestão de programas.
Senior Regional Security Analyst
MastercardFounded in 1966, Mastercard is a worldwide transaction, payment-processing, and consulting company best known for its line of personal and business credit cards. As an employer, Ma
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Regional Security Analyst Security Reporting & Automation Senior Analyst Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: - Abide by Mastercard's security policies and practices; - Ensure the confidentiality and integrity of the information being accessed; - Report any suspected information security violation or breach, and - Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
• Responsible for the day-to-day administration, monitoring, and continuous improvement of Equity Resources' cybersecurity program • Serve as the technical lead for security operations, Microsoft 365 security, identity and access management, data protection, AI governance, vulnerability management, incident response, and enterprise network security while partnering with business stakeholders to protect company and customer information • Duties include Security Operations and Incident Response, Network Security, Microsoft 365 Security Administration, Data Protection, AI Governance, and Microsoft Purview, Identity and Access Management, Vulnerability and Risk Management, Compliance and Governance



