Analista Pleno CloudSec

<h3>Accountabilities</h3><li>
<strong>Cloud Identity and Access Management:</strong>Manage and govern AWS Identity and Access Management (IAM), including creating, reviewing, and maintaining roles, managed and inline policies, and permissions.</li><li>
<strong>Security Governance:</strong>Implement and maintain the principle of least privilege, ensuring access rights are appropriately restricted and aligned with organizational security requirements.</li><li>
<strong>Multi-Account Security Management:</strong>Configure and maintain security controls across AWS Organizations, Control Tower, and Landing Zone environments, including the implementation and management of Service Control Policies (SCPs).</li><li>
<strong>Access Auditing and Remediation:</strong>Conduct regular audits of permissions and access configurations, identify excessive privileges, and implement corrective measures to reduce security exposure.</li><li>
<strong>Security Monitoring and Incident Response:</strong>Monitor, investigate, and respond to security alerts and misconfigurations using AWS services such as GuardDuty, Security Hub, CloudTrail, AWS Config, and KMS.</li><li>
<strong>Automation and Process Optimization:</strong>Develop scripts, preferably in Python, to automate IAM analysis, security remediation, access reviews, and governance workflows.</li><li>
<strong>Cross-Functional Collaboration:</strong>Partner with engineering and infrastructure teams to define secure access policies and implement appropriate controls for new services, applications, and workloads.</li><li>
<strong>Documentation and Standards:</strong>Maintain clear documentation of cloud security processes, policies, procedures, and governance guidelines.</li><li>
<strong>Compliance and Auditing:</strong>Support internal and external audits and compliance initiatives related to LGPD, ISO 27001, PCI-DSS, CIS Benchmarks, and other relevant security frameworks.</li><li>
<strong>Continuous Improvement:</strong>Stay informed about AWS security developments, emerging threats, and industry best practices, recommending improvements to strengthen cloud security and governance.</li><h2>Requirements</h2><li>
<strong>Cloud Computing Experience:</strong>Previous hands-on experience with cloud computing environments, preferably AWS, including familiarity with cloud security principles and infrastructure management.</li><li>
<strong>AWS IAM Expertise:</strong>Practical experience creating and managing IAM roles and policies, including managed and inline policies, applying Service Control Policies, and administering access across multi-account AWS environments.</li><li>
<strong>Least-Privilege Implementation:</strong>Demonstrated understanding of access governance and the ability to apply least-privilege principles to reduce excessive permissions and strengthen security controls.</li><li>
<strong>AWS Security Services:</strong>Solid knowledge of AWS IAM, CloudTrail, AWS Config, GuardDuty, Security Hub, and Key Management Service (KMS).</li><li>
<strong>Education:</strong>Completed or ongoing bachelor's degree in Computer Science, Information Technology, or a related field.</li><li>
<strong>AWS Certification:</strong>An AWS certification is required, such as AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, AWS Certified Cloud Practitioner, or an equivalent credential.</li><li>
<strong>Python and Scripting:</strong>Familiarity with Python for automating security and governance tasks is an advantage. Knowledge of Bash, Go, or other scripting languages is also desirable.</li><li>
<strong>Infrastructure as Code:</strong>Experience with tools such as Terraform or AWS CloudFormation is a plus.</li><li>
<strong>Security and Compliance Frameworks:</strong>Familiarity with security standards and regulatory frameworks, including CIS Benchmarks, NIST, ISO 27001, and LGPD, is desirable.</li><li>
<strong>Cloud Security Tools:</strong>Experience with Cloud Security Posture Management (CSPM) tools is an advantage.</li><li>
<strong>Multi-Cloud Experience:</strong>Exposure to Azure, Google Cloud Platform (GCP), or other cloud environments is beneficial.</li><li>
<strong>Language Skills:</strong>Intermediate English proficiency is desirable.</li><li>
<strong>Analytical and Problem-Solving Skills:</strong>Strong attention to detail and the ability to investigate security issues, identify root causes, and implement effective solutions.</li><li>
<strong>Collaboration and Communication:</strong>Ability to work effectively with technical stakeholders, document security requirements clearly, and contribute to a culture of security awareness and continuous improvement.</li><h2>Benefits</h2><li>
<strong>Performance-Based Compensation:</strong>Profit-sharing and results-based bonus program (PLR).</li><li>
<strong>Food and Meal Allowances:</strong>Financial support for meals and everyday food expenses.</li><li>
<strong>Healthcare Coverage:</strong>Medical and dental insurance plans.</li><li>
<strong>Childcare Assistance:</strong>Financial assistance for daycare or babysitting expenses.</li><li>
<strong>Transportation Support:</strong>Transportation allowance in accordance with applicable policies.</li><li>
<strong>Wellness Programs:</strong>Access to Wellhub and TotalPass fitness and wellness programs.</li><li>
<strong>Employee Assistance Program:</strong>Personal support resources through an Employee Assistance Program (EAP).</li><li>
<strong>Financial Protection:</strong>Optional private pension and life insurance plans.</li><li>
<strong>Pharmacy Discounts:</strong>Access to discounts on eligible pharmacy purchases.</li><li>
<strong>Parental Support:</strong>Dedicated pregnancy support program.</li><li>
<strong>Extended Parental Leave:</strong>Extended maternity and paternity leave under the Empresa Cidadã program.</li><li>
<strong>Inclusive Workplace:</strong>A commitment to diversity, equity, and inclusion, with equal employment opportunities regardless of race, color, religion, gender identity, sexual orientation, nationality, disability, or age.</li><li>
<strong>Professional Development:</strong>Opportunities to strengthen cloud security expertise and develop technical skills in a challenging financial technology environment.</li>