Security Analyst (English Speaking)LATAM, BR%LABEL_POSITION_TYPE_CONTRACT%
Job Description
Location: LATAM
Type: Full time, Contract
Security Analyst
We're looking for a hands-on Security Analyst to join our Information Security team. You'll play a key role in keeping our systems secure, our users properly provisioned, and our compliance programs on track — all while growing your skills across cloud security, SaaS environments, and real-world security operations.
What you'll do
You'll split your time across four main areas:
Security Operations — Monitor and triage alerts from our SIEM, EDR, and cloud security tools. Investigate incidents, support response efforts, and help maintain the detection rules and runbooks that keep our security program running smoothly.
Identity & Access Management — Own the user lifecycle from onboarding to offboarding. Administer Google Workspace, SSO, and cloud IAM platforms, enforce least-privilege access, and keep our MFA and access review programs current.
Endpoint & IT Operations — Support macOS, Windows, and mobile device management. Troubleshoot authentication and device issues, maintain asset inventory, and assist with patching and endpoint security tooling.
Compliance & Governance — Help us stay audit-ready across SOC 2, ISO 27001, and PCI DSS by collecting evidence, maintaining documentation, and participating in tabletop exercises.
What we're looking for:
- 2–4 years in information security or IT operations
- Hands-on experience with IAM concepts — SSO, MFA, RBAC, least privilege
- Familiarity with security operations tools and concepts (SIEM, EDR, alert triage)
- Basic understanding of at least one major cloud platform (GCP, AWS, or Azure)
- Comfortable supporting macOS and/or Windows endpoints
- Working knowledge of SOC 2, ISO 27001, NIST, or PCI frameworks
- Clear communicator who can juggle priorities in a fast-moving environment
Bonus points for:
- Google Workspace administration experience
- Exposure to Splunk, Chronicle, or QRadar
- Endpoint management with Jamf or Intune
- Scripting in Python or Bash
- Security+ , SSCP, or cloud security certifications