I am a Security Consultant in LTAM's Foundstone Services team, which is the world-class consulting and education services division of McAfee.My duty is to deliver senior level consulting and training in cybersecurity domains like:- Vulnerability assessment;- Penetration testing;- Web application vulnerability assessment;- Threat intelligence;- Threat hunting;- Incident response;- Data-focused risk assessment;- Security posture & maturity assessment.

Postgraduate professor for the "Computer Forensics" course.Main subjects: live response, memory forensics, network forensics, forensics methodologies and reports.

Responsible for SIEM and other DFIR solutions, working from TechBiz's Brasilia branch office.Highlights:- Technical lead and sales engineering for SIEM solutions (HP ArcSight);- Training on other Digital Forensics and Incident Response solutions;- Coaching and team coordination.

Responsible for security consulting projects at the Brasilia branch office and technical relationship with local customers.Experience highlights:- Managed Security Services / SOC (coordination and process design)- SIEM (ArcSight)- Sales engineering- Government / Public sector presales

The main goal for this position was to coordinate all activities related to security monitoring, specially focused on business risks.For almost one year on this position, my work at Oi's SOC (COpS) involved:- design and plan of SOC infrastructure, systems and processes;- internal and third party teams coordination;- project management;- definition and implementation of compliance controls due to external (SOx) and internal audits;- technical, business and management… Show more The main goal for this position was to coordinate all activities related to security monitoring, specially focused on business risks.For almost one year on this position, my work at Oi's SOC (COpS) involved:- design and plan of SOC infrastructure, systems and processes;- internal and third party teams coordination;- project management;- definition and implementation of compliance controls due to external (SOx) and internal audits;- technical, business and management presentations of SOC projects and results;- definition of techinical specs for products and services acquisitions;- cooperation with internal and external incident response teams;- design and implementation of components to collect, process, correlate and analyze events. Show less

My first project at Oi was to conduct the incorporation of the company's SOC services, formerly provided by a third party MSS company, into consolidated internal SOC services provided by Brasil Telecom (which merged with Oi and which was my employer before June 2009).At Brasil Telecom (now Oi), my main activities were:- Development and management of systems for security log handling and correlation, as part of the company's SOC (Security Operations Center);- Administration of… Show more My first project at Oi was to conduct the incorporation of the company's SOC services, formerly provided by a third party MSS company, into consolidated internal SOC services provided by Brasil Telecom (which merged with Oi and which was my employer before June 2009).At Brasil Telecom (now Oi), my main activities were:- Development and management of systems for security log handling and correlation, as part of the company's SOC (Security Operations Center);- Administration of the SOC infrastructure and software, including the SIEM solution (Intellitactics ISM);- Incident handling.All the developed activities have helped Brasil Telecom to achieve its goals on external (customers) and internal (corporate) security commitments as a whole, anti-fraud business objectives and SOX compliance. Show less

Worked on Brasil Telecom CSIRT (similar description for the position above).

Worked as a consultant for different companies in the telecommunications, financial and transport industry. Main activities:- Design, implementation and administration of SIEM solutions;- Software security audits based on ISO 17799 and ISO 15408;- Design, implementation and administration of security devices, both commercial and FOSS;- Pen-tests and VA;- Writing of guides for secure software development;- Source code audits.Has also supported the sales department… Show more Worked as a consultant for different companies in the telecommunications, financial and transport industry. Main activities:- Design, implementation and administration of SIEM solutions;- Software security audits based on ISO 17799 and ISO 15408;- Design, implementation and administration of security devices, both commercial and FOSS;- Pen-tests and VA;- Writing of guides for secure software development;- Source code audits.Has also supported the sales department on technical proposals for custom security solutions and services (like MSS). Show less

Worked on the design and development of network security software: firewall (Aker Firewall) and mail gateway (Aker Mail Gateway). Main programming language: C/C++.

Collaborated on network security researches, mainly focused on intrusion detection.