I am currently providing services for Client Black, focusing on conducting RSAC (Rapid Security Assessment Card). My work involves analyzing architecture diagrams and implementing security controls to ensure alignment with recognized frameworks such as NIST, CIS, and MITRE ATT&CK ID.My role includes evaluating and enhancing security practices, applying recommended controls to strengthen the overall security posture, while ensuring compliance with best practices and the client's specific needs.Blue Client: I was involved in a 3-phase project focused on enhancing security within the Google Cloud Platform (GCP):1. Designed security baselines for GCP services, ensuring alignment with best practices and compliance requirements. 2. Developed Windows and Linux scripts to automatically verify whether security controls were compliant or non-compliant. 3. Migrated the defined controls to Prisma Cloud, creating custom queries to detect and validate compliance status against the recommended GCP security baselines. This project covered strategic control definition, automation, and continuous monitoring, strengthening the client’s cloud security posture.

First experience as Information Security Analyst. Performed Third-Party Cybersecurity Risk Assessments specially for SaaS providers, ensuring compliance with the ISO 27001 standard. This involved risk analysis and evaluation of security controls implemented by vendors to align with the client’s security requirements.

Managed the IT environment for the Big4 Porto office, performing tasks such as:• On-site and remote technical support for users across the Porto, Lisbon, and Angola offices.• Configuration and delivery of equipment, as well as application troubleshooting.• Administration of Active Directory, including password changes, domain machine management, and setting access permissions for network folders.This role encompassed both hands-on technical support and systems administration, ensuring the efficient operation of the organization’s IT infrastructure.

Departamento das Tecnologias de Informação | DTIProvided IT support to all employees of ANA and third-party collaborators at Aeroporto Francisco Sá Carneiro, including airline staff, primarily Portway and Groundforce teams. My responsibilities included:• Managing IT equipment and maintaining check-in printers.• Providing technical support for check-in counters and boarding gates to ensure smooth operations.• Handling password management, access control, and application troubleshooting.This role required a hands-on approach to maintaining the airport's critical IT systems, ensuring operational continuity and efficient support for all stakeholders.

Promote products and services from HP.

In my first role in IT, I was responsible for:• Preparing computers, operating systems, and required applications for deployment.• Handling transportation guides and shipping documentation to send equipment to SONAE stores.• Providing helpdesk support for the Jornal de Notícias in Porto, resolving technical issues and ensuring smooth IT operations.This experience laid the foundation for my technical skills and introduced me to diverse IT environments, from retail logistics to media support.