Information Security Analyst III – Security Operations, WAF, AppSec

🔥 9 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cooperativa Central Ailos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2002

🛡️ Insurance

💼 Consulting

📦 Logistics

Insurance • Consulting • Logistics

Cooperativa Central Ailos is a cooperative organization that focuses on providing accessible financial services to its members, ensuring inclusivity and support for various communities. The organization emphasizes user-friendly interfaces and high contrast accessibility features, catering to a diverse clientele.

📋 Description

• Administer, configure, monitor, and enhance Web Application Firewall (WAF) and application and API protection solutions • Create, fine-tune, and maintain policies, rules, signatures, exception lists, and protection profiles • Conduct tuning and reduce false positives, tracking impacts with business, product, and development teams • Analyze Layer 7 events and blocks, identifying attacks, vulnerability exploitation, API abuse, scraping, and bots • Support controls against L7 DDoS, OWASP Top 10 threats, credential stuffing, enumeration, and feature abuse • Participate in onboarding applications, domains, and APIs onto protection solutions • Track effectiveness, coverage, blocking volume, and policy maturity metrics • Participate in digital certificate management, including mTLS, TLS, eCPF, and eCNPJ • Support the administration, monitoring, and maintenance of HSMs, including cryptographic key lifecycle management and integrations • Maintain, administer, and optimize security tools in the environment • Support security monitoring, triage, investigation, and incident response • Contribute to detection engineering, use cases, rules, and visibility improvements • Support hardening, attack surface reduction, vulnerability remediation, and configuration strengthening • Participate in technical incident analysis, root-cause analysis, containment, eradication, lessons learned, and war rooms • Collaborate with Infrastructure, Networks, Cloud, Architecture, AppSec, DevSecOps, CSIRT, and vendors • Prepare and maintain technical documentation, procedures, runbooks, and configuration standards • Support audits, regulatory requests, and evidence curation • Serve as a technical reference for junior and mid-level analysts through mentoring and technical reviews • Support solution assessments, proof-of-concept initiatives, and evolution roadmaps • Contribute to continuous improvement, routine automation, and delivery standardization

🎯 Requirements

• Proven experience in information security operations within mid-sized or large corporate environments • Hands-on experience administering WAF and application and API protection solutions, including configuration, tuning, policy management, and event analysis • Knowledge of the OWASP Top 10 and OWASP API Security • Knowledge of web application attack techniques and corresponding mitigation controls • Knowledge of HTTP/HTTPS, TLS, DNS, reverse proxies, load balancers, CDNs, and service publishing architectures • Familiarity with firewalls, IPS/IDS, EDR, SIEM, vulnerability management, and network segmentation • Understanding of cloud environments, containers, microservices, APIs, and integration with development pipelines • Ability to analyze logs, correlate events, and conduct technical incident investigations • Automation and scripting skills to support operational routines are desirable • Industry certifications in offensive or defensive security, cloud, or the application protection solutions in use are desirable

🏖️ Benefits

• Medical Insurance • Dental Insurance • Renascer Program • Special Events and Milestones • Education Investment Program • Profit-Sharing Plan • Individual Development Plan • Private Pension Plan • Life Insurance • Tempo Juntos Program • Meal and/or Food Allowance • Transportation Allowance • Childcare/Nanny Assistance