As a Cyber Security Analyst II on the Blue Team, you will strengthen and defend RecargaPay's cloud and internal environments through proactive security controls, continuous monitoring, and hardening. You will drive vulnerability management, secure our AWS cloud footprint, operate endpoint defense and Zero Trust controls, and apply strong cryptographic practices to keep our systems resilient against evolving threats.
RESPONSIBILITIES
- Monitor, harden, and continuously improve the security posture of AWS cloud environments (IAM, WAF, Security Hub, GuardDuty, network security groups, and related AWS security services).
- Own and evolve the vulnerability management program end to end — scanning, risk-based prioritization, remediation tracking, and reporting across infrastructure and applications.
- Operate and tune EDR platforms to detect, contain, and remediate endpoint threats.
- Design and implement Zero Trust Architecture controls, including identity-based access, micro-segmentation, and least-privilege enforcement.
- Apply cryptography best practices — encryption at rest and in transit, key management, and certificate lifecycle — across systems and services.
- Partner with engineering teams to embed security controls into cloud infrastructure and CI/CD pipelines from design through deployment.
- Conduct security assessments of internal projects and third-party vendors to validate adherence to best practices.
- Maintain and tune SIEM correlation rules and alerting logic to strengthen detection coverage across the environment.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent hands-on experience).
- Hands-on experience securing cloud environments, with strong emphasis on AWS (IAM, WAF, Security Hub, GuardDuty, KMS, and related services).
- Experience running vulnerability management programs, including scanning tools, prioritization frameworks, and remediation workflows.
- Working knowledge of EDR platforms and day-to-day endpoint security operations.
- Solid understanding of Zero Trust Architecture principles and practical implementation.
- Strong grasp of cryptography fundamentals — encryption, key management, and PKI.
- Familiarity with SIEM tools and security monitoring practices.
- Relevant certifications are a plus (e.g., AWS Security Specialty, CompTIA Security+, CySA+, or equivalent).
Competencies
- Strong communication and influencing skills across cross-functional teams.
- Analytical mindset: ability to investigate complex security issues, identify root causes, and recommend actionable mitigations.
- Calm under pressure: composure and clarity when responding to time-sensitive or high-impact security matters.
- Self-directed, senior-learner mindset — proactively researches emerging threats, tools, and best practices.
Benefits
- Competitive and market-aligned salary.
- Remote work — wherever you are, you’re part of the team!
- Home office allowance through a monthly deposit in the RecargaPay app.
- Health and dental plans with no co-pay.
- Life insurance.
- Flexible meal allowance (via Flash).
- TotalPass membership to take care of your health.
Diversity & Inclusion at RecargaPay
At RecargaPay, you’ll have the freedom to be who you are because we believe that diverse perspectives and experiences make us more creative and stronger. Here, everyone is welcome to express themselves authentically. We value the richness of each journey and the multiple ways of seeing the world, without distinctions of gender, race, sexual orientation, age, religion, or any other characteristic that makes us unique.
About the Use of Your Data
By sharing your resume with us, you authorize the use of your data for analysis during the selection process and possibly for other opportunities within the RecargaPay group. You can request the update or deletion of your information at any time, in accordance with LGPD (General Data Protection Law).
