Information Security Architecture

🔥 17 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GFT Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1987

💼 Consulting

🛡️ Insurance

🔒 Cybersecurity

Consulting • Insurance • Cybersecurity

GFT Technologies is a leading technology and digital transformation company that specializes in providing advanced solutions for consent management and data privacy compliance. Their flagship product, Cookiebot, enables businesses to automate user consent collection efficiently, ensuring adherence to complex privacy regulations such as GDPR and CCPA. GFT's solutions facilitate seamless integration into existing digital infrastructures, helping over 600,000 customers globally manage user data transparently and securely.

📋 Description

• Define and implement security architectures based on Defense in Depth and Zero Trust. • Assess the risks of new integrations, hybrid environments, multicloud environments, and SaaS solutions; issue technical assessments and document residual risks. • Lead threat modeling using STRIDE, DREAD, OWASP Top 10, and MITRE ATT&CK. • Ensure the application of Security by Design and Privacy by Design throughout the development lifecycle. • Design and audit IAM and PAM solutions, including SSO, MFA, OIDC, SAML 2.0, RBAC, and secure credential management. • Validate DevSecOps practices and integrate SAST, DAST, SCA, IaC Security, and Secrets Detection controls into CI/CD pipelines. • Define encryption standards for data in transit and at rest and support HSM processes and cryptographic key management. • Ensure compliance with Brazil’s LGPD, Banking Secrecy regulations, PCI DSS, and Central Bank of Brazil regulations, including CMN Resolution 4,893, BCB Resolution 85, and CMN Resolution 5,274. • Serve as the technical lead for impact assessments, access management, penetration tests, and security assessments. • Approve systemic cybersecurity risks. • Collaborate with technical and business teams and influence critical information security decisions.

🎯 Requirements

• Zero Trust Security Frameworks and Architecture (NIST SP 800-207). • NIST SP 800-53. • OWASP ASVS 4.0, MASVS, MASTG, and API Security Top 10. • CIS Controls. • Application Security Architecture. • Vulnerability Management. • Experience with CrowdStrike Falcon, Trend Micro Vision One, and QualysGuard. • Experience with IBM Security Guardium and Securiti.ai. • Experience with CyberArk, BeyondTrust, and Keycloak. • Experience with Guardsquare (DexGuard, iXGuard, ThreatCast) and MobSF. • Experience with Palo Alto NGFW, Prisma Access, Zscaler, Cloudflare WAF, and Apigee X. • Experience with MITRE Caldera, Burp Suite Professional, Cobalt Strike, MISP, Shodan, and ANY.RUN. • Experience with Microsoft Entra ID, Entra Connect, and Intune. • Experience with Splunk, Splunk Enterprise Security, and Wazuh. • Information security certifications and knowledge aligned with the requirements of the position. • Remote work and employment under Brazil’s CLT regime.

🏖️ Benefits

• Flexible benefits card – choose how and where to use it. • Scholarships for undergraduate, graduate, MBA, and language courses. • Certification incentive programs. • Flexible working hours. • Competitive salaries. • Annual performance reviews with a structured career development plan. • International career opportunities. • Wellhub and TotalPass. • Private pension plan. • Childcare assistance. • Medical insurance. • Dental insurance. • Life insurance. • A safe, diverse, and inclusive workplace. • A development and growth culture built on Continuous Scaled Learning.