Mid-Level Information Security Analyst – DevSecOps

🕒 August 31

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 33%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SGA TI em Nuvem

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2010

💼 Consulting

🤖 Artificial Intelligence

Cloud Computing • Consulting • Artificial Intelligence

SGA TI em Nuvem is a specialized IT consulting company focused on cloud solutions that facilitate digital transformation for businesses. They offer a range of services including data center migration, disaster recovery, data modernization, and AI solutions aimed at optimizing operational costs and enhancing visibility in the cloud. With a commitment to intelligent technology and strategic partnerships, SGA aims to address real-world business challenges through innovative cloud-based strategies and automation, ensuring a competitive advantage for its clients.

📋 Description

• Support the development team in implementing DevSecOps and Secure by Design practices. • Design, implement, and enhance CI/CD pipelines incorporating security controls. • Integrate SAST, DAST, SCA, and container vulnerability scanning tools into pipelines. • Automate security controls and processes. • Identify and remediate vulnerabilities in applications, dependencies, packages, images, and components. • Support the remediation of vulnerabilities identified by tools, scanners, and technical assessments. • Implement security improvements in AWS environments, including services, configurations, permissions, networks, and resources. • Assess security configurations and propose improvements for AWS resources. • Support the hardening of systems, servers, containers, and infrastructure. • Support the secure management of secrets, credentials, keys, and certificates. • Implement controls to prevent the exposure of credentials and sensitive information. • Collaborate with developers, DevOps, infrastructure, and security teams throughout the development lifecycle. • Support the creation and evolution of security standards and best practices for development and cloud environments. • Document implemented configurations, procedures, standards, and improvements.

🎯 Requirements

• Professional experience in Information Security, DevSecOps, Cloud Security, or related areas. • Hands-on experience with AWS. • Knowledge of CI/CD and experience with at least one pipeline platform, such as GitHub Actions, GitLab CI/CD, Azure DevOps, Jenkins, or a similar tool. • Knowledge of Git and software development workflows. • Knowledge of security in Linux systems. • Knowledge of Docker and containers. • Knowledge of secrets, credentials, key, and certificate management. • Basic to intermediate knowledge of IAM and cloud access control. • Familiarity with SAST, DAST, SCA, and Container Scanning concepts. • Ability to analyze security issues and implement the corresponding fixes. • Collaborative profile with the ability to work closely with development teams.