Security Analyst, Mid-Level

Job not on LinkedIn

🔥 0 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NEXDOM healthtech

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2024

🏥 Healthcare

💼 Consulting

⚕️ Healthcare Insurance

Healthcare • Consulting • Healthcare Insurance

NEXDOM healthtech is a Brazilian health technology company that provides software and services to transform the management of health plans and operator operations, with a strong specialization in the Sistema Unimed ecosystem. Their solutions include health-plan administration, authorization and attendance workflows, SUS reimbursement processing, beneficiary and corporate portals, relationship and ombudsman management, business intelligence (DataHealth), negative letter handling, online health declarations, and a configurable business rules engine for fraud control and cost management. NEXDOM offers implementation and integration services aligned with ANS and Unimed Brasil regulations, positions itself as a market leader for Unimed customers, and focuses on agile, low-risk deployments and scalable, usage-based pricing.

📋 Description

• Monitor security events, alerts, and incidents, conducting analyses and initiating appropriate actions in accordance with established procedures • Identify, analyze, and track vulnerabilities across environments, systems, applications, and technology assets • Support the investigation, classification, remediation, and documentation of information security incidents • Support access and permissions management • Conduct information security risk analyses, identifying threats, vulnerabilities, and potential business impacts • Track action plans for addressing risks, vulnerabilities, and nonconformities • Support security assessments of systems, applications, suppliers, and new technology solutions • Prepare and maintain records, evidence, documentation, and reports related to security activities • Consolidate and analyze information security metrics • Support internal and external audits • Contribute to the dissemination of information security best practices and security awareness initiatives • Support the review and continuous improvement of security policies, procedures, controls, tools, and processes • Work on low- to medium-complexity activities and projects, escalating or supporting higher-complexity requests as needed • Support identity, authentication, and access control management • Execute incident response lifecycle activities, including identification, containment, eradication, recovery, and root cause analysis • Coordinate vulnerability tracking, prioritizing vulnerabilities based on risk and monitoring remediation plans • Support the implementation and monitoring of security controls in cloud environments and SaaS platforms • Support personal data protection initiatives and compliance with Brazil’s General Data Protection Law (LGPD) • Support security assessments of applications and secure development practices • Perform other related activities as required by the department

🎯 Requirements

• Bachelor’s degree in Information Technology, Information Security, Computer Science, Information Systems, or a related field • Intermediate knowledge of information security, networks, operating systems, infrastructure, and cloud computing • Experience identifying, analyzing, and addressing security vulnerabilities, threats, and incidents • Knowledge of security tools such as SIEM, EDR/XDR, IAM, vulnerability management, and monitoring solutions • Experience with access management, multi-factor authentication (MFA), permission reviews, and identity controls • Knowledge of Microsoft 365 Security platforms, including Microsoft Entra ID, Microsoft Defender, Microsoft Intune, Conditional Access, and related solutions • Knowledge of cloud security environments, such as Azure, Oracle Cloud, or similar platforms • Knowledge of information security frameworks, standards, and best practices, such as ISO 27001, CIS Controls, the NIST Cybersecurity Framework, or similar frameworks • Ability to prepare technical reports, metrics, risk analyses, and action plans • Experience tracking nonconformities, risks, vulnerabilities, and corrective actions • Preferred: SC-900, SC-200, Security+, AZ-900, or ISO 27001 Foundation certifications

🏖️ Benefits

• Health insurance for you and your dependents (no monthly premium 👀) • Dental insurance for you and your dependents (no monthly premium 👀) • Meal/food allowance • TotalPass • Emotional wellness program for you and your dependents • Life insurance • Birthday month day off • Education allowance • Home office allowance • Transportation allowance • Parking allowance • Flexible hybrid or remote work • Relaxed and friendly work environment • Culture focused on Innovation, Excellence, Commitment, and Teamwork • Company experiencing significant growth