Lucas Palma Email & Phone Number

Limeira, Sp, Br

São Paulo, Sp, Br

Responsible for Platforms Security area, protecting platforms from the largest Latin America's digital bank against a wide variety of attacks.AI SecurityKey Results:- Team creation, roadmap, overall scenario analysis- Business needs and awareness vs AI Risks- Initial assessments on safer AI usageMobile SecurityKey results:- Reducing banking malwares by 90%;- Improving the mobile apps roadmap considering the security and customer experience.Main activities:- CI/CD tools for mobile apps (SAST, DAST, SCA);- Embedding real time security directly into the apps;- Performing security assessments;- Improving observability enabling data-driven decisions;- Executive reports, dashboards and presentation;- People management.

Osasco, São Paulo, Br

Responsible on merging MovilePay Fintech security area into iFood.

Osasco, São Paulo, Br

Role on MovilePay, a Fintech (Credit and Banking) from Movile group, now part of iFood.- Structured the Information Security area on MovilePay, a fintech responsible for iFood's Banking Digital Account;- Managed Engineering and Tech related teams;- Information Security reports to the board and to internal and external audits.Main results:- Structured the Information Security area, culture and roadmap for MovilePay;- Supported MovilePay's growth with shift left Information Security approach;- Raised the Security Awareness;- Focal point on global audits and on communications with other companies from the group;- Information Security Master Plan creation.Main skills:CISO, Security Management, KPIs, OKRs, Security by Design, Security Awareness, Risk Management, Risk Assessment, Application Security, Incident Response, IT Risks, Security Auditing, Cryptography.

São Paulo, Sp, Br

- Supporting Engineering and Product teams on applying Information Security on their products, architecture and code;- Adding and reviewing Information Security tools on CI/CD;- Develop and apply training to improve the team knowledge on Information Security.Main results:- Supported the whole company on fixing Critical and High vulnerabilities according to SAST;- Supported on renewing PCI-DSS audit;- Mitigated critical and high risks together with IT Risks team;- Developed tool to automate security assessment on code repository;- Structured Security Champions program.Main skills:Application Security, IT Risks, Risk Management, Risk Assessment, Security Champions, Security Awareness, SAST, PCI, Security Architecture.

São Paulo, São Paulo, Br

- Supporting Engineering and Product teams on applying Information Security on their products, architecture and code;- Adding and reviewing Information Security tools on CI/CD;- Develop and apply training to improve the team knowledge on Information Security;- Performing and report of Web Penetration tests.Main results:- Supported the Company's growth with shift left Information Security approach;- Implemented and reviewed SAST tools;- Security trainings for teams and other companies.Main skills:Application Security, Security Architecture, Security by Design, Cryptography, Red Team, Security Awareness, SAST.

São Paulo, São Paulo, Br

- Definition and review of the functional requisites on products;- Support to Information Security team on requirements and tests;- Automated tests implementation;- Manual tests;- Tools and methodologies development to monitor the products and KPIs health.Main results:- Supported to structure the Quality Assurance area, as the first member of the team;- Organization and managing of the teams tasks according to the company's growth and products priorities;- Definition of quality tools and methodologies.Main skills:Test automation, KPIs, OKRs, Kanban, Functional requirements, QA, Java, Kotlin, Ruby, Python, JavaScript.

London, Gb

- Penetration tests on web sites;- Secure code review;- Game debugging to find cheats.Main results:- Improved the security of the clients.Main skills:Web pentest, code auditing.

Barueri, São Paulo, Br

- Responsible for Quality Assurance and Information Security areas;- Automated tests development;- Manual tests;- Performance tests;- Penetration tests;- Secure code review.Main results:- Created the first automated test suite;- Supported the Company's growth with shift left Quality and Information Security approach;- Support on migrating the code repositories to GIT;- Focal point on renewing PCI-DSS audit.Main skills:Test automation, performance test, JMeter, QA, pentest, PCI, Java, JavaScript.

San Ramon, California, Us

- Daily interaction with international team;- Tech lead for the Quality Assurance team;- Automated and manual tests for Mobile (iOS and Android), Web (Frontend), Backend (API) and embedded platforms;- Software development in Java and C++;- Release and documentation of new firmware versions for the embedded devices.Main results:- Technical leadership of quality teams;- Focal point of communication with international companies;- Tools development to automate the deploy of new firmware for embedded devices.Main skills:Test automation, web, mobile, backend, embedded, Gherkin, Java, C++.

Campinas, Sao Paulo, Br

- Test automation on Web and Backend using Java;- Debug customer issues reported.Main results:- Created automated test suites to validate systems security and compliance.Main skills:Test automation, Cryptography, Java, C++.

Campinas, Sao Paulo, Br

- Threat Intelligence analysis;- Fraud investigation for credit cards;- Reports and presentations with results and new fraud techniques;- Daily contact with international teams.Main results:- Obtained credentials for secret Brazilian forums;- Discovery of new frauds on Brazilian market;- Support on "boleto" frauds investigation.Main skills:Threat intel, frauds, credit cards.

Campinas, Sp, Br

- Consulting, auditing and training for internal and external clients;- Consulting on Secure Software Development Life Cycle;- Code Auditing;- Web Penetration Testing;- Consulting on Cryptography development and assessment;- Security research projects on Cryptography, Mobile Platform, NFC and SIM Cards.Main results:- Articles and book chapter published;- Training for clients;- Implementation of cryptographic algorithms and test vectors for validation.Main skills:Security consulting, security auditing, security research, cryptography, application security (appsec), pentest, NFC, SIM Cards.

Campinas, Sp, Br

- Web development using Java and JavaScript.Main results:- Development of web systems for software defined networks project.Main skills:Java, JSF, Hibernate, JavaScript, HTML, CSS.

São Paulo, Sp, Br

- Web development using Java (JSF) and JavaScript;- JBoss configuration;- Database on MySQL with Hibernate;- Web crawling tools development using Java.Main results:- Development on a CRM system, with improvements using Google libraries;- Improvements on JBoss configuration;- Development of web crawlers.Main skills:Java, JSF, Hibernate, JavaScript, HTML, CSS, Google Charts.

Translation of articles and tutorials from Portuguese to English.

Bachelor'S Degree, Computer Science

Incomplete Master’S Degree, Computer Engineering

Executive Degree, Cybersecurity