Senior Analyst – Information Security

Job not on LinkedIn

🔥 1 minute ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Grupo SBF

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2020

🛒 Retail

⚽ Sports

🛍️ eCommerce

Retail • Sports • eCommerce

GRUPO SBF is an Brazilian sports ecosystem that connects brands, people and creators. Its business is composed of Centauro (a major sports retail chain), Fisia (the official distributor of Nike in Brazil) and FitDance (a fitness/dance brand). The company focuses on moving sports-related careers and communities, with operations that include retail and brand distribution; it is headquartered in Pinheiros, São Paulo.

📋 Description

• Serve as the technical reference for cloud security at Grupo SBF • Define infrastructure security controls and standards • Work with platform and SRE teams to implement controls through code • Lead cloud incidents from end to end • Triage posture findings, infrastructure vulnerabilities, and penetration test results • Classify risks in context and route remediation efforts to the responsible teams with SLAs • Lead security design reviews for architectures, environments, public exposures, and services that process sensitive data • Design preventive guardrails at the organization and account levels • Maintain version-controlled hardening baselines and review them periodically • Review IaC and define security gates in the pipeline, including IaC scanning and policy-as-code • Define least-privilege policies and lead periodic access reviews • Define controls for clusters, images, admission control, and runtime security • Maintain a catalog of detection use cases for the cloud control plane and write runbooks • Lead incidents, including scoping, investigation, evidence preservation, containment, eradication, and post-mortems • Facilitate tabletop simulation exercises • Ensure the security of CI/CD pipeline identities and permissions • Track posture and response metrics and maintain evidence for audits and LGPD compliance • Support security points of contact, lead office hours and training sessions, write standards and playbooks, and communicate risks to leadership • Act as a consultant, prioritizing automated guardrails over manual approvals • Develop others and share knowledge with the team

🎯 Requirements

• 5+ years of experience in information security, including 3+ years dedicated to public cloud security in a large-scale production environment • Deep expertise in GCP or AWS, with the ability to transfer concepts to the other provider • Practical mastery of IAM, including non-human identities, cloud networking, encryption/KMS, and native logging • Hands-on experience with Kubernetes and container security, including admission control • Automation experience with Terraform and Python or Go, including security controls in CI/CD pipelines • Experience managing vulnerabilities and security posture with SLAs, context-based prioritization, and remediation tracking • Experience responding to cloud incidents and investigating using audit logs • Applied knowledge of CIS Benchmarks, MITRE ATT&CK for Cloud, and NIST CSF 2.0 • Knowledge of LGPD • Google Professional Cloud Security Engineer, AWS Security Specialty, CKS, CCSP, or CCSK certifications are a plus • Knowledge of detection-as-code and experience with SIEM are a plus • Experience with container runtime security is a plus • Experience securing AI workloads is a plus • Experience with software supply chain security, including SBOMs and image signing, is a plus • Experience in regulated environments, such as PCI DSS, and in high-volume retail/e-commerce is a plus

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume