Lucio Lima Email & Phone Number

Araraquara, São Paulo, Brazil

Cargo Atual: Analista de Segurança da Informação - Blue Team | Consultoria de TISobre:🛡️ Atuo na linha de frente da segurança cibernética, protegendo ativamente os ativos da empresa contra ameaças e ataques.🔍 Especialista em resposta a incidentes, realizo análises detalhadas para identificar, conter e erradicar ameaças, garantindo a continuidade das operações.⚙️ Implemento e gerencio soluções de segurança de ponta, como SIEM, EDR e firewalls, para proteger a infraestrutura e os dados da empresa.📜 Desenvolvo e implemento políticas, normas e procedimentos de segurança, garantindo a conformidade com a LGPD e outras regulamentações.📈 Conduzo auditorias de segurança, gerencio vulnerabilidades e riscos, e apresento relatórios técnicos e executivos para diferentes públicos.🤝 Colaboro com equipes multidisciplinares para fortalecer a cultura de segurança e garantir a proteção dos ativos da empresa.Habilidades:Resposta a IncidentesSIEM (implementação, configuração, otimização)Segurança de Endpoints (EDR, antivírus)Segurança de Borda (firewalls, IPS)Definição de Processos e PlaybooksCriação e Implementação de Políticas de SegurançaGestão de Vulnerabilidades e RiscosAuditoria de SegurançaConformidade com a LGPDComunicação e Apresentação de ResultadosTrabalho em Equipe

Brazil

(TIVIT are a leading IT infrastructure and tech outsourcing company in Brazil with 10,000 employees) I spent over 7 years here, progressing from Junior IT Security Specialist to my final role with the company as IT Security Team Leader.As IT Security Team Leader, I:• Managed, monitored and resolved any issues arising at L3 in the functions outlined below, for approximately 200 clients including National and Multinational giants like Visa and Rede Card (Brazilian market leader in credit card services):o Console Antivirus (Symantec, Trend, McAfee and Sophos)o Console Antispam (Symantec, McAfee and Trend)o Console Intrusion Protection Services (Proventia and McAfee)o Content-control software (Websense and Fortinet)o Console Firewall (Checkpoint and Fortinet)o ITILo SIEMo Incident Response• My role included responsibility for mentoring, training, developing and assisting my team members to deal with any IT security issues that arose with our clients throughout the night. I would generally assist, encourage and advise them on how to resolve issues, and would step in to deal with more complex issues which needed to be escalated. We covered all IT security issues from malware, PUPs, Firewall issues, Antivirus, Intrusion Detection and Prevention, and more.

Brazil

• As a Senior, my role comprised all of the duties I had as a junior, and new responsibilities, including mastering operation, deployment and maintenance of • Console Firewall (Checkpoint and Fortinet) and Content-control software (Websense and Fortinet)• Managed IT Security projects such as implementing laptop encryption and use of a personal firewall.• In mid 2012, the company reorganised the security client services from individual team members in client teams into a dedicated Security Operations Centre. Security experts from teams throughout the company were combined into a larger unit which would have primary responsibility for this function. I moved from my team of 7 to the 40 person SOC at its inception.• As I was regarded as a subject matter expert in IPS and Antivirus and Antispam I took on training and education of other SOC team members in these tools.• I also benefited from the central pool of expertise by learning Console Firewall and Content Control software tool expertise from my new colleagues.• Provided information security support to regional IT teams worldwide.• Regularly updated and informed client IT teams on developments in issues, threats, tools and operating procedures in the Antivirus, Antispam and WebContent areas.• Because I had played a key role in training of new hires in relation to Antivirus, Antispam, Content Control and the operations of SOC generally, my manager offered me the chance to lead the SOC ”dawn team” when SOC became a 24 hour operation, and I jumped at the chance.

Brazil

• Installed and upgraded antivirus software.• Designed, analysed and implement efficient IT security systems.• Installed security measures and operate the software.• Tested and evaluated new technology.• Performed network penetration tests, application assessment scans and risk assessment reviews.• Set parameters of Enterprise Informatics Security.

• LATAM moved their contract to IBM in search of a more competitive contract rate, asking for networking outsourcing and management for an environment of 5,000 machines. My new manager made me exclusively responsible for these outsourcing functions because he felt 5,000 machines, while a large environment, was suitably manageable for someone of my skills and experience. Based on my previous experience with LATAM I suggested they may have underestimated the size of their environment, but nonetheless I was delighted to tackle the challenge. As some of the company locations were quite remote, I regularly had to work onsite in remote areas in conjunction with our field support team. • Key achievement: Rolling out upgrade, implementation and testing of Symantec SEP 10 to SEP 11 for 10,000 machines in four months.• On the first review of the outsourcing contract, I was able to demonstrate that in fact we were managing an environment of over 10,000 machines for LATAM. My manager told me that had he known this was the case at the start he might have appointed a more senior analyst to manage the contract, but he was very impressed at my performance, and this directly led to him asking me to take on even more responsibility for Bunge.• Key achievement: • In Feb 2009, mitigating the damage caused by the Conficker C variant OF INSERT that wreaked havoc on systems worldwide. Because of the timezone differences and where the working week fell, we had a 48 hour window to secure the machines before work resumed on Monday. We managed to reduce the risk considerably by working closely together with the manufacturer Symantec, spending almost 48 hours continuously on site to ensure that the customer was no longer at risk of a mass spread in their environment - thankfully this was achieved with minimal disruption to the client’s business. I was commended by my manager for my work on this.

Brazil

• After coming top of my class in INSERT, I was delighted to land my first professional role with Unisys.• I joined a team of 15 people at the Brazilian HQ of Unisys in Sao Paolo, which employed over 1,000 people.• My team was responsible for managing all the networking needs of LATAM, one of South Americas biggest airlines, on an outsourcing basis. • My role involved managing Symantec Console Antivirus, SMS (Systems Management Server 2003) and Client Desktop issues. Daily I monitored network traffic and carried out investigations of infected workstations. I monitored and investigated spam and suspicious email traffic and responded to security enquiries from users.• Reason For Leaving: I had developed a strong relationship with LATAM and although when the contract was to be renewed, the client chose to move their business to IBM, they asked IBM if they would offer me a role there, as they wanted to continue working with me. Although I enjoyed my time at Unisys I could not pass up the opportunity to develop my skills further working for “Big Blue”.

Higher National Diploma, Computer Science, Nfq Level 8

On successful completion of this programme, graduates should be able to successfully secure professional roles at entry to mid-level.

Bacharelado, Processamento De Dados

Education record