Cybersecurity Analyst, Mid-Level

Job not on LinkedIn

🔥 1 minute ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ROIT

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

⚖️ Legal

☁️ SaaS

Consulting • Legal • SaaS

ROIT is a Brazilian tax-technology company that provides an integrated ecosystem of SaaS solutions and AI-powered tools to help medium and large companies prepare for and manage the 2026 tax reform. Its offerings include an official tax-reform calculator that reprocesses SPED files and invoices, an Invoice-to-Pay automation suite (with ERP/SAP integrations), Tax Discovery for reclaiming taxes, regulatory consulting and education programs, and ongoing support for compliance and scenario planning.

📋 Description

• Define and maintain secure configuration standards for cloud environments, servers, workstations, and network devices. • Implement and monitor perimeter and access protection controls, including WAF, API protection, Zero Trust, MFA, and network segmentation. • Manage infrastructure vulnerability and patch programs, tracking coverage by EDR, antimalware, and MDM tools. • Ensure immutable backups are in place and restoration tests are performed, while supporting the encryption of sensitive data. • Integrate cloud and infrastructure logs with the SIEM and support incident triage and response alongside the outsourced monitoring service (MDR). • Produce evidence for audits, ISO 27001 certification, and customer due diligence processes. • Monitor security metrics and document implemented standards, exceptions, and controls. • Partner with Infrastructure, Platform Engineering, and IT teams to contribute to measurable, documented, and auditable controls.

🎯 Requirements

• 3–5 years of experience in infrastructure or cloud security, or in infrastructure and SRE with a security focus. • Hands-on experience with Google Cloud Platform (GCP), including IAM, VPC, firewall rules, Cloud Logging, and KMS. • Knowledge of networking, including TCP/IP, DNS, firewalls, segmentation, and VPNs. • Experience with hardening and CIS benchmarks in Linux and Windows environments. • Experience with WAF and API protection. • Knowledge of vulnerability and patch management. • Familiarity with infrastructure as code and scripting in Python, Bash, or PowerShell. • Knowledge of ISO 27001, CIS Controls, or NIST CSF. • Strong written communication skills for documenting standards, exceptions, and evidence. • Certifications such as Google Professional Cloud Security Engineer, CCSK, Security+, or CKS are a plus. • Experience with CSPM, Cloudflare Zero Trust, pfSense, Kaspersky EDR, or MDM solutions is a plus. • Experience in regulated environments, particularly in the financial and tax sectors, or experience with Brazil's LGPD, is a plus. • Experience serving as the point of contact for a SOC or outsourced MDR service is a plus.