Corporate CISO#InfoSec Strategy & Program Management- ISO27001 & NIST and SANS- Identity (IGA & IAM)- Policy & Standard and Procedures- Security Awareness#CyberSec Strategy- #blueteam #redteam #purpletem- #CSIRT #CyberOps- #ThreatIntell #SOCIT Audit ( itaudit )- #ITGC #ISO27001:2022 #NIST #SANSIT Governance ( #itgov )- #servicedesk #CMDB #IC- #incidentmanagent #knownlogebase- #eventmanagement #problemmanagement- changemanagement #ticketreview- #crisismanagement #FinOps

Informativo Security Lead

Departamento de Defesa e Segurança (DESEG) da Federação das Indústrias do Estado de São Paulo (FIESP)

- Cybersecurity Operations (CyberOPS)- BLUE Team and Red Team Tasks (Hybrid);- Cybersecurity Project Manager;- LGPD Compliance;- Network Security Archtecture;- Firewall Management (Cisco ASA&FTD, Checkpoint, Fortinet);- Security Concentrador (Cisco ISE);- Cyber Analítics (Cisco Stealthwatch (IT) & CyberVision OT);- Security Awareness;- Phishing Analisys;- Audit Response;- Incident Response;- Threat Hunting;- Security Advisor;- Security Compliance;- Vulnerability Management and Assessment;- Global Cybersecurity Board Response;- Network Security Mentor;

AES SBU South America (BU) & AES Corporation (Holding)• Architect of Security and Networking Solutions for IT e OT environments;• Local Cyber Program Manager;• Network and Security Team Lead (Blue & Red Team, Remediation Team, Local SOC/IR Local Team & Network Team, Crisis Team);• Local Cyber Security Process Owner (Vulnerability Management, Penetration Tests, Security Advisor, Remediation Plan, Incident Management, Incident Response Plan, Awareness);• Enforce the Security Guidelines into the Business Area and Projects;• Security OT Integrations (Process and Policies)• Responsible for providing answers to Audits (Internal and External);• Frontend for Audits for this SBU (CyberSec, NERC/CIP, ISO55001, ISO27001, ITGC/CSA, SOX)• Frontend for all Global Risk Audits for this SBU;• Responsible for attend all of AES Technical Security Guidelines (V3) in the infrastructure;• IT & OT Integration using Firewalls, IPs, Routing for Power Plants Hydro, Solar, Eolic, Locks;• Project Management and Budgeting Management CAPEX & OPEX for Telecom and Security;• SOC Integration and SOC Migration;

• Architect of Network and Security Solutions for IT e OT environments;• Local SOC and Remote SOC Integration;• Network and Security Team Lead (Remediation Team & SOC Team & Network Team & Crisis Team);• Enforce the Security Guilelines into the Business Area and Projects;• Security OT Integrations (Process and Policies)• Responsible for providing answers to Audits (Internal and External);• Budgeting Management CAPEX & OPEX for Telecom and Security;• Responsible for attend all of AES Technical Security Guidelines (V3) in the infrastructure;• Responsible to design high availability services as MPLS, Radio, ICS, VOIP/TOIP/Tele Presence;• Security Design of VPLS, GETVPN, DMVPN, VPN Concentrators, Perimeter Firewalls, Internet Firewalls, DMZs;• Network Design of WAN (VRFs, BGP4, OSPF3);• IT & OT Integration using Firewalls, IPs, Routing for Power Plants (Hydro, Solar, Eolic) and Locks;• Project Management;Goals• Technical Lead of Network Security Design of Internet Services and Farm Segregation from the Mother Company AES Eletropaulo followed into a Security Audit without any issues;- DMZ, Frontends, Backends, Internet Security, VPN Concentrators C2S and S2S;• Network Security Design Architecture of ROCC - Remote Operational Center;• Network Security Architecture of WAN MPLS called as NRW with 40 links using L3 Nokia SAR Microwave Radios.• Security Segregation of ROCC and all Power Plants of AES Brasil, creating the Security Perimeters and DMZ Method to Integrates IT and OT environments;• Design of all of Critical Plants of AES TIETE Brazil (Security and Telecom and VOIP/TP); • Design of Security and Connectivity of Cloud Services of AES Tiete;• Design OT DMZ Domain:- Dataflow Control (SMB3.0 (IPSEC) Inspected Folder + SFTP);- Global Catalog Replication; (IPSEC Replication over Firewalls and 2FA method);- Jump Server, Bastion Host, PIVOT Server (RDP to OT zones);- SEP Antivirus for OT;- Windows Update for OT;- Admin Password Management (LAPs);

Client AES Brasil (AES Tiete & AES Brasil & AES ELETROPAULO & AES SUL)• Keep a MPLS BGP4 Cloud integrated with an OSPF3 Frame-Relay Cloud;• Appliances: Cisco (Routers/Switches/Firewall/ACS)/ ISS(IBM ISS FW Solution)/Checkpoint FW;• Solutions Design and Implement (Security and Connectivity);• Firewall Cisco ASA 5500 Perimeter Security (Industrial Environment);• Wireless Cisco Appliances Access points;• Network Management (NetSight(Enterasys)/RASM(Enterasys)/Cisco(WCS);• 802.1X Authentication (Cisco ISE & Cisco ACS & Linux Free Radius);• ITIL Process Documentation;• WAN Routing (OSPF3 & BGP4)• WAN IP High Avaibilility with IP SLA Feature with HSRP/VRRP;• LAN Management (OSPF3 Routing/RSTP/PVSTP/VRRP/IP-Helper);• VPN Management (Site to Site / Client to Site);• Linux Support Services (O.S./Syslog/Radius/LDAP);• Orion Network Performance Monitoring Tool with NETFLOW modules;

- Client AES Tiete & AES Brasil; * Network Head; * Telecom; * Archtecture; * Information Security;

- Modern Operational Systems;- Network Operational Systems;- Computer Networks;- Telecom and Infrastructure;

• Sistemas Operacionais;• Sistemas Operacionais de Rede;• Redes de Computadores;• Segurança de Redes• Infraestrutura e Telecomunicações;

Cliente Petrobras (Replan Paulinia): (Network Support/Network Security Engineer/LAN Specialist);• Appliances: Enterasys/Cisco(Routers/Switches/Firewall)/Juniper(Router)/ISS(IBM IPS Solution);• Solutions Design and Implement (Security and Connectivity);• Firewall Cisco ASA 5550 (Failover (Active/Active)/Redundant(Interfaces)/Perimeter Security(Contexts)) (ICS);• Wireless Networks Appliances (Switch/AP) (Enterasys/Nortel/Linksys/Cisco);• Network Management (NetSight(Enterasys)/RASM(Enterasys)/Cisco(WCS);• 802.1X Authentication (AAA Radius (Free Radius/IAS/Cisco Secure ACS);• ITIL Process Documentation;• LAN Management (OSPF3 Routing/RSTP/PVSTP/VRRP/IP-Helper);Goals:• OT Security Segregation with Perimeters Firewalls from IT environments;

- Windows 2003 Server 70-290;

Projetos:- TCS Corp;- ABN AMRO / Real (Santander);- Goodyear;- Deutsch Bank;- JnJ;- Bank of Boston (Itau Personnalité);

Projeto Caixa Economica Federeal - GISTU/BU- Cisco Routers Familia 2514, 2621, 3640, 7200VXR (7205/7206);- Cisco Switches L2 (2900XL/2950);- 3COM Switches L2;- Frame Relay / X.25 / X.21 / Leased Lines (ISND) / DIAL Backup;- Monitoramento de Rede;- Windows NT4 / 2000 Administration;- Linux Debian Administration;- VMWARE ESXI Administration;- Antivirus MCAFEE EPO Administration;

Projeto Caixa Economica Federeal - GISTU/BUProjeto Caixa Economica Federeal - GISTU/BU- Cisco Routers Familia 2514, 2621, 3640, 7200VXR (7205/7206);- Cisco Switches L2 (2900XL/2950);- 3COM Switches L2;- Frame Relay / X.25 / X.21 / Leased Lines (ISND) / DIAL Backup;- Monitoramento de Rede;- Windows NT4 / 2000 Administration;- Linux Debian Administration;- VMWARE ESXI Administration;- Antivirus MCAFEE EPO Administration;

Projeto Caixa Economica Federeal - GISTU/BUProjeto Caixa Economica Federeal - GIIMA/BUField Services & Tecnico Residente:- Cisco Switches L2 (2900XL/2950);- 3COM Switches L2;- Incident Management (Active Remedy System) ARS;- Windows NT4 / 2000 Administration;- VMWARE ESXI Administration;- Antivirus MCAFEE EPO Administration;

- Montagem e Manutenção de Computadores Pessoais e Servidores- Linux Workstation and Server Deploy;- Novell Netware 3.11/3.12/4.11 Deploy and Support;

- Montagem e Manutenção de Computadores Pessoais e Servidores- Linux Workstation and Server Deploy;- Novell Netware IPX 3.11/3.12/4.11 Deploy and Support;- Lantastic NETBIOS / NETBEUI Network Support;