Led an offensive security squad, balancing operations and strategy. Developed analysts' skills, managed strategic clients, and aligned security efforts with business goals.- Performed blackbox, greybox, and whitebox pentests on web, API, mobile, and network environments.- Conducted code reviews following OWASP Guides and AppSec best practices, focusing on input validation, access control, error handling, and secure use of libraries.- Categorized vulnerabilities from both pentests and code reviews using CVSS and Impact vs. Probability models.- Monitored client operations to improve AppSec maturity based on OWASP SAMM.- Communicated test results effectively through concise reports and presentations for technical and non-technical audiences.- Mentored other analysts, fostering skill development through hands-on support and knowledge sharing.- Validated reports and ensured high-quality deliverables.- Developed strategies to reduce risks and enhance security posture.

I focused on identifying vulnerabilities, testing security defenses, and guiding less experienced analysts. My responsibilities spanned various types of penetration testing and security reviews across multiple platforms, ensuring thorough risk assessments and delivering actionable insights.- Performed blackbox, greybox, and whitebox pentests on web, API, mobile, and network environments.- Conducted code reviews following OWASP Guides and AppSec best practices, focusing on input validation, access control, error handling, and secure use of libraries.

In this role, I focused on strengthening the company’s digital perimeter, supporting cloud infrastructure maintenance, and assisting with LGPD compliance across development teams.- WAF Policy Definition: Developed and fine-tuned Web Application Firewall (WAF) policies to protect applications from threats while ensuring high availability.- Cloud Infrastructure Maintenance: Managed and monitored security infrastructure on AWS and Google Cloud, ensuring service resilience and data protection.- Application Security Testing: Collaborated with development teams to validate security requirements and support testing of the company’s applications.- LGPD Compliance Implementation: Assisted with the implementation of LGPD (General Data Protection Law) compliance, working closely with development teams to align processes and applications with regulatory requirements.- Ongoing Monitoring and Incident Response: Worked with the security team to respond to incidents, maintain system integrity, and implement continuous improvements to security practices.

In this role, I aligned product initiatives with company objectives and optimized internal workflows.- Product Strategy & Roadmap Execution: Defined product initiatives and aligned internal roadmaps with business goals.- Backlog Ownership for Internal Products: Managed and prioritized the backlog for a team building internal tools to improve operations.- Cross-Functional Collaboration: Worked with stakeholders across departments (Operations, Support, etc.) to identify pain points and develop solutions.- Prioritization & Value Delivery: Balanced priorities to ensure continuous delivery of impactful solutions that enhanced business efficiency.- Data-Driven Decision Making: Used KPIs and performance metrics to guide product decisions and measure success.- Agile Leadership: Led the team through Agile practices, facilitating sprints and ensuring alignment with product goals.

As a Product Owner at SANAR, my main focus was to ensure that stakeholder needs were translated into high-quality solutions, coordinating delivery across two development teams—one focused on web and the other on mobile. I collaborated closely with multidisciplinary teams and stakeholders, maintaining a clear focus on quality and efficiency. Key responsibilities included:- User Story Creation & Refinement: Translated stakeholder requirements into detailed user stories, prioritizing the backlog based on business needs and customer value.- Collaboration with Multidisciplinary Teams: Worked with teams composed of front-end, back-end, and QA developers, ensuring alignment between deliverables and quality expectations.- Agile Methodologies (Scrum & Kanban): Facilitated agile ceremonies such as sprint planning, daily stand-ups, and retrospectives to keep the teams aligned and productive.- Bug Management & Customer Support: Monitored and prioritized bug reports, ensuring efficient resolution and transparent communication with clients and stakeholders.- Continuous Validation & Feedback Loop: Ensured that developments were regularly validated with stakeholders and adjusted as needed to deliver maximum value.- Web & Mobile Coordination: Managed cross-team coordination to ensure consistent functionality and a seamless user experience across web and mobile platforms.- Quality Monitoring: Worked closely with QA specialists to ensure that all deliveries passed thorough testing before being released to users.