Information Security Engineer

Please submit your resume in English.

To learn more about our team and office culture in São Paulo, Brazil, visit the following links. 
Careers Page: https://www.knowbe4.com/careers/locations/sao-paulo
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-S%C3%A3o-Paulo-Location-EI_IE969384.0,7_IL[…]M_-C1lsxoZq7Cx8IriVE8MkrzuTmnJzqego77RAWZz9sqGt_55BflwYKpQeg
LinkedIn: https://www.linkedin.com/company/knowbe4/life/brazil/

The Information Security Engineer performs all processes and procedures necessary to ensure the safety of information systems, services, and networks. In addition, the primary responsibility is to lead security assessments, implement, configure, and manage existing security tools, deploy new security tools, and assist infosec staff on necessary projects and activities.

Responsibilities:

• Assess information security processes and design more efficient methods using available tools including generative AI
• Oversee the Implementation and management of Infosec applications, services and tools such as Endpoint Detection and Response (EDR), Threat and Vulnerability Management (TVM), Software and application inventory security management, Email and communications security, and more.
• Optimization and application of monitoring solutions to track and detect potential security issues.
• Conduct security, vulnerability, and risk assessments across services, cloud and applications, using both automated tools, manual testing procedures, and generative AI.
• Involved in all aspects of Incident Response.

Requirements:

• Bachelor’s degree in information security, information systems, or similar preferred
• Relevant industry certification in information security, management information systems security or similar preferred 
• Experience leveraging generative AI in your security testing workflows , automations and processes
• Certifications in relevant securing relevant business applications
• Minimum 3+ years experience in information security and Technology or related role
• Demonstrated practical knowledge in information security, IT, internet concepts, and business applications.
• Some experience with infosec testing tools and scripts.
• Some experience working with relevant security applications such as EDR, MDM, Email Security, IdP, AWS, Azure, solutions.
• Familiar with implementing secure IT/Infosec SaaS applications. 
• Familiar with OWASP top 10,MITRE ATT&CK Framework, as well as other relevant frameworks.
• Knowledge of various operating systems, ChromeOS, Linux, Mac, Windows.
• Able to navigate the linux command line and write basic scripts
• Strong verbal and written communications
• Excellent time management and organization skills