Marcos Henrique Email & Phone Number

Munich, By, De

Munich, Bavaria, Germany

Porto, Portugal

Key Responsibilities:• Manage a team of cybersecurity professionals as the SOC lead, providing guidance and support to ensure the effective operation of the Security Operations Center.• Lead incident handling and response efforts, overseeing the investigation, containment, eradication, recovery processes and lessons learned.

Porto, Portugal

Key Responsibilities:• Lead incident handling and response efforts, overseeing the investigation, containment, eradication, recovery processes and lessons learned.• Utilize SIEM, SOAR, and XDR platforms to monitor and analyze security events, identify potential threats, and orchestrate automated response workflows.• Implement automation strategies to streamline operational tasks, reduce manual effort, and enhance efficiency in security operations.• Develop API scripts to integrate different security tools and platforms, optimizing data sharing and collaboration between various cybersecurity solutions.• Ensured the security of cloud environments by implementing and managing appropriate controls, monitoring systems, and incident response procedures.• Implement and maintain endpoint protection solutions to safeguard organization assets from malicious activities and prevent unauthorized access.• Monitor Web Application Firewalls (WAF) to protect web applications and infrastructure from attacks.• Conducted proactive threat hunting exercises to identify and mitigate potential security vulnerabilities and risks within the organization's network.• Gather and analyze threat intelligence from various sources to enhance detection capabilities, understand emerging threats, and support decision-making in incident response.

São Paulo, Brasil

• SOC Representative in Dev Squads: Acted as the link between the SOC and development squads. Worked closely with development teams to ensure security was integrated into the software development lifecycle.• SIEM Operation: Managed the Security Information and Event Management (SIEM) system to monitor and respond to security alerts.• Log Source Review and Parsing: Conducted thorough log source reviews, analyzing data from various sources, including network devices, servers, and applications.• Use Case Development: Collaborated with the security team to create and analyze use cases for the early detection of suspicious behavior and potential security threats. Developed custom SIEM rules and correlations to enhance threat detection capabilities.• Threat Detection and Response: Proactively monitored security alerts, analyzed security incidents, and identified potential threats.

São Paulo, São Paulo, Brazil

• SIEM Administration: Managed the deployment, configuration, and maintenance of SIEM systems to ensure their optimal performance.• Log Source Review and Parsing: Conducted thorough log source review, analyzing the various data feeds and logs from network devices, servers, and applications.• Use Case Development: Collaborated with the SOC team to identify and develop use cases and correlation rules within the SIEM platforms.

Osasco

• Identify, monitor and report information security vulnerabilities and incidents; • Monitor and manage application and infrastructure security testing. • Regularly promote risk analysis in IT environments in order to mitigate potential problems that may impact the Organization. • Implement and monitor Information Security controls, focusing on continuous improvement of processes, policies and procedures (SOC). • Manage Information Security projects and provide internal consultancies, coordinating and executing the activities of identification and implementation of security solutions. • Create metrics and indicators for effectiveness of IT compliance standards and IT security information deployment.• Detect and troubleshoot unauthorized access to information and applications. • Perform security testing on infrastructure and application.

• Identify, monitor and report information security vulnerabilities and incidents; • Monitor and manage application and infrastructure security testing. • Optimize the use and apply best practices to manage and • Identify, monitor and report information security vulnerabilities and incidents; • Monitor and manage application and infrastructure security testing. maintain security mechanisms and tools: IDS / IPS, AntiSpam, DLP, Web Filter, Proxy, SIEM, Digital Certificates, Encryption, Firewalls, Hardening, Antivirus. • Detect and troubleshoot unauthorized access to information and applications.

Mba Em Gestão De Cibersegurança, Cyber Security

Superior, Sistemas De Informação

Activities and Societies: Cursos online, Inglês, Linguagem de Programação, Banco de dados, Desenvolvimento de Projetos.