About Latitude.sh
Latitude.sh global computing platform was launched in 2019, enabling businesses to programmatically deploy single-tenant Bare Metal instances in different parts of the world.
We are a team of passionate individuals about hardware, software, and network infrastructure looking to build the fastest, easiest-to-use, developer-centric single-tenant Cloud infrastructure. If you share this passion, join our growing team of talented people and help build the future of the Internet.
Summary
We are looking for a Senior Cybersecurity Analyst to join our team. This professional will be responsible for implementing tools and processes to protect our digital assets and support SOC 2 Type 2 and ISO 27001 certification.
The main focus will be to structure information security, implement continuous monitoring, respond to incidents, and ensure compliance with industry standards and best practices.
Key Responsabilities
- Define and implement information security strategies aligned with industry best practices.
- Deploy and manage monitoring, detection, and incident response tools.
- Conduct vulnerability assessments and penetration testing to strengthen infrastructure security.
- Monitor and respond to cyber threats and security incidents.
- Implement solutions for DDoS protection and targeted attack mitigation.
- Ensure compliance with SOC 2 Type 2 and ISO 27001, supporting audits and certification processes.
- Collaborate with the governance team to structure security controls and policies.
- Evaluate and recommend cybersecurity tools and solutions.
- Develop and implement incident response procedures.
Skills and Qualifications
- Hands-on experience in information security management in corporate environments.
- Advanced knowledge of SOC 2 Type 2, ISO 27001, NIST, and security frameworks.
- Experience with SIEM, IDS/IPS, EDR, and other security tools.
- Ability to perform and interpret penetration tests and security audits.
- Experience in incident response.
- Strong skills in creating and implementing security policies.
- Knowledge of DDoS protection and attack mitigation.
- Ability to work collaboratively with infrastructure, governance, and development teams.
- Advanced English proficiency.
Nice to have
- Certifications such as CISSP, CISM, GIAC.
- Experience in the Cloud Computing or Service Provider industry.
- Knowledge of network security (VPN, Firewalls, Zero Trust).