• Red Team– As the single dedicated Red Team analyst, led all of our offensive security initiatives;– Coordinating Pentests with our third party partners;– Recurring manual DAST scans, vulnerabilities analysis and coordinating their correctionswith the applications teams;– Recurring Phishing Simulations and awareness training.• Blue Team– SIEM alerts configuration, setting a log pipeline for all production WAF ACLs using AmazonKinesis Data Firehose, S3 and CloudTrail;– Researching, designing and implementing a new Network and Web Application Firewallarchitecture for an important integration with a new business partner;– Creation, review and application of security baselines for every existing WAF and SecurityGroups across all our AWS accounts.

• During Open Co's merger, acted as interim tech lead for the Cloud and Application Security team, serving as the main point of contact between our team, the other internal teams and outside partners;• Assisting the SRE, Data Engineering and Dev teams with any security task during the platform merger (AWS accounts internal networking, database policies \& permissioning, tech stack and tools integration etc);• Integrating and managing AWS SSO service, abolishing the use of account specific IAM user credentials and policies and centralizing user management for all 15+ AWS accounts.

• Kick-started REBEL's security team and as the only security analyst was responsible for everything security related during this time, working directly under the company's CTO;• Setting security controls in our cloud environment (AWS) like WAFs, Amazon GuardDuty &Security HUB, scanning for vulnerabilities, creating a CIS hardened image for our EC2deployments, creating and managing VPNs;• Internal Pentests for our Web Application;• Creating and documenting a NIST-based internal Cyber Security process;• Helping Legal & Compliance during LGPD (Brazilian's GDPR) implementation.

• Experience as developer for the company’s flagship products, Leaf, SmartFlow & Seeds, softwares for control and optimization of industrial processes, built with C++, Qt and gRPC;• Restructuring the products licenses renewal process to use TOTP (Time-Based One Time Passwords).

Working helping R&D and Sales with development, client support and documentation of the company multiple CIAM Solutions. During this time I had the chance to work helping the company with some security and data privacy compliances and policies like EU's General Data Protection Regulation (GDPR) and drafting the Cloud Security Alliance's Security, Trust & Assurance Registry (CSA STAR) self-assesment.

• Working as iOS Developer for Saffe, at the time a Germany based start-up developing an app using world-class facial recognition technology to make payments easier and more secure.

• Beer Love was an app where you could discover new craft beers, share you experiences and rate the new beer you tried. Intending to expand the beer culture, it aimed to bring breweries and users closer by promoting challenges and prizes.