Information Security Analyst, Mid-Level – DevSecOps

Job not on LinkedIn

🔥 12 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SGA TI em Nuvem

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2010

💼 Consulting

🤖 Artificial Intelligence

Cloud Computing • Consulting • Artificial Intelligence

SGA TI em Nuvem is a specialized IT consulting company focused on cloud solutions that facilitate digital transformation for businesses. They offer a range of services including data center migration, disaster recovery, data modernization, and AI solutions aimed at optimizing operational costs and enhancing visibility in the cloud. With a commitment to intelligent technology and strategic partnerships, SGA aims to address real-world business challenges through innovative cloud-based strategies and automation, ensuring a competitive advantage for its clients.

📋 Description

• Support the development team in implementing DevSecOps and Secure by Design practices • Design, implement, and enhance CI/CD pipelines, incorporating security controls into the development process • Integrate security tools into pipelines, including SAST, DAST, SCA, and container vulnerability scanning • Automate security controls and processes • Identify and remediate vulnerabilities in applications, dependencies, packages, images, and components • Support the remediation of vulnerabilities identified by security tools, scanners, and technical assessments • Implement security improvements in AWS environments, including services, configurations, permissions, networks, and resources • Assess security configurations and propose improvements for AWS resources • Support the hardening of systems, servers, containers, and infrastructure components • Support the secure management of secrets, credentials, keys, and certificates • Implement controls to prevent the exposure of credentials and sensitive information in source code, pipelines, and development environments • Collaborate with developers, DevOps, infrastructure, and security teams to embed security throughout the development lifecycle • Support the creation and continuous improvement of security standards and best practices for development and cloud environments • Document implemented configurations, procedures, standards, and improvements

🎯 Requirements

• Professional experience in Information Security, DevSecOps, Cloud Security, or related fields • Hands-on experience with AWS • Knowledge of CI/CD and experience with at least one pipeline platform, such as GitHub Actions, GitLab CI/CD, Azure DevOps, Jenkins, or a similar tool • Knowledge of Git and software development workflows • Knowledge of security in Linux systems • Knowledge of Docker and containers • Knowledge of secrets, credentials, keys, and certificate management • Basic to intermediate knowledge of IAM and cloud access control • Familiarity with SAST, DAST, SCA, and container scanning concepts • Ability to analyze security issues and implement the corresponding remediation measures • Collaborative approach and ability to work closely with development teams