Responsible for the development and maintenance of the Lobo Guará Project, a comprehensive cybersecurity platform focused on Cyber ​​Threat Intelligence.

- Threat IntelligenceI collect and analyze information about threats against Sicoob. This way, I help Sicoob to understand the panorama of threats and better prepare against cyber attacks and fraud. I always seek to identify threat trends against Brazilian financial institutions, taking into account attacks aimed at customers. Furthermore, I develop and manipulate tools that support me in proactively identifying threats. I developed tools that search for leaked/violated credentials of employees, customers and sensitive information from the institution itself, using as a source datasets/Dataleaks available on forums, Telegram groups, public gits, etc. Additionally, I developed some tools that search for phishing sites against customers and employees.- Threat HuntingI regularly search the organization's security mechanisms, mainly the SIEM, in order to analyze the logs and try to identify possible threats. If something suspicious is identified, carry out a detailed analysis.- Digital forensicsWhenever necessary, support in the execution of the process implemented in the institution, using the tools for collecting, examining, analyzing and recording the results obtained.- Malware AnalysisImplemented sandboxes to perform basic and advanced malware analysis. Basic analyzes are carried out using an automated tool (cuckoo). In cases that require a deeper analysis of malware, mainly involving banking malware, it is carried out in sandbox with static and dynamic analysis tools, so that a thorough analysis of the functions of the malware can be carried out, to identify how to protect our employees and customers.- Security Incident ResponseMost incidents are handled by Junior and Full Analysts, when they encounter difficulties in resolving incidents, they request the support of Senior Analysts. Whenever necessary, I support them in clarifying the problem and help them understand the response we gave to the incident.

- Penetration Testing

- Vulnerability Management;- Mobile App Security Testing;- Investigation;- Incident Response.

Best Practices;Policy Development;Security Procedures;Awareness Campaigns; Incident Reponse;Vulnerability analysis;Penetration Testing;Network Security;System Security;

Risk Analysis;Best Practices;Policy Development;Symantec Managed Security Services;Awareness Campaigns; Incident Reponse;Vulnerability Scans;Penetration Testing;Network Security;System Security;Access Control;Hardening;Firewalls;endpoint Protection;Anti Spam;IDS/IPS;

Analise de Vulnerabilidade;Administração de Endpoind McAfee;Administração de Antispam McAfee;Administração de Firewall Fortinet;Criação de projetos relacionados a segurança da informação;Procedimentos de segurança da informação;Linux;Troubleshooting;

Testes de softwares de soluções em segurança da informação, tais como: Aker Firewall UTM, AWD, ASMG, ARC, Aker IPS e demais produtos desenvolvidos pela Aker;Analise de vulnerabilidade;Teste de Invasão;Desenvolvimento de shell scripts (Linux) para automatização de testes;Montagem de ambientes com servidores Windows e Linux, com os mais variados tipos de serviço em execução;Teste de VPN (Site-to-site e Client-to-site): IPSEC, OpenVPN, VPN SSL, L2TP, PPTP, Secure Roaming, etc;Teste de Autenticação: Active Directory, LDAP, RADIUS, NTLM e X509;Utilização constante de ambiente de virtualização (VMware vSphere ESXi e Citrix XenServer);Vivência com a metodologia Scrum;

Suporte ao usuário;Administração e monitoramento de servidores;Manutenção e configuração de computadores (Windows e Linux);Administração de Firewall e Antivírus Endpoint;Infraestrutura da Rede;