Leonardo Malteze Ramirez Email & Phone Number

Ontario, Canada

• Leading penetration testing efforts for Carrefour Bank, focusing on white-box, grey-box, and black-box assessments across mobile applications (Android), web applications, APIs, and infrastructure to ensure robust security across platforms.• Executed comprehensive security evaluations, including Android Mobile Pentest, Web Pentest, API Pentest, and Infrastructure Pentest, identifying and exploiting vulnerabilities to strengthen security posture.• Developed and led end-to-end testing strategies, including vulnerability scanning, manual testing, and exploitation, using tools and custom scripts.• Collaborated with development and operations teams to deliver actionable remediation plans, ensuring the timely resolution of security vulnerabilities and enhancing application security.• Authored and delivered detailed technical reports, as well as executive summaries, presenting findings and mitigation strategies to stakeholders, aligning security improvements with business objectives.

Bauru, São Paulo, Brasil

• Spearheaded the creation of the Penetration Testing team, being solely responsible for establishing the pentesting framework and methodologies used to assess web applications, APIs, and infrastructure security. • Conducted end-to-end pentests, identifying critical vulnerabilities in web applications, APIs, and network infrastructure.• Collaborated closely with development teams to guide them through the vulnerability remediation process.• Authored comprehensive technical reports and executive summaries, detailing findings, risk levels, and prioritized action plans, effectively communicating security issues to both technical teams and business leaders.

São Paulo, São Paulo, Brazil

• Led comprehensive web application pentesting, as well as internal and external penetration tests, identifying and exploiting security vulnerabilities to enhance the organization’s defense mechanisms.• Managed vulnerability assessments using Tenable.io, ensuring continuous monitoring, prioritization, and remediation of security risks across the organization's infrastructure.• Developed and implemented security automation tools in Python.• Provided expert guidance on cloud security, focusing on AWS environments, securing cloud assets and services through best practices and automated solutions.

São Paulo, São Paulo, Brazil

• Engaged in offensive security tasks such as pentesting new applications; also involved in tool development projects for security in Python/Lambda, aimed at protecting cloud environments (AWS) by managing tools like WAF; responsible for vulnerability management through Tenable.io and risk management.

São Paulo E Região, Brazil

São Paulo, Sp, Brazil

São Paulo E Região, Brazil