Marcos Santos Email & Phone Number

- Performed penetration testing on infrastructure, applications and cloud environments (Azure and AWS). Both in-person and remotely, with sophisticated EDR evasion techniques and C2 communication.- Designed and implemented social engineering campaigns.- Developed, maintened and selected cybersecurity software.- Created team organization processes and played a key role in reformulating security products.- Engaged with clients on various levels, discussing findings and resolutions, and providing them with comprehensive reports documenting test results, identified vulnerabilities, and recommended mitigation strategies.- Produced intelligence artifacts to support informed decision-making and strategic planning in the domain of cybersecurity. These artifacts provided valuable information about potential threats and the security posture of the organization and customers.- Conducted Purple Team exercises to contribute to the Security Operations Center (SOC) teams. Assisted in the creation of rules based on indicators of compromise and scenarios identified in real engagements. Provided support in incident response activities to analyze security incidents, mitigate their impact, and prevent further compromise.- Authored posts and articles to disseminate knowledge among other employees, fostering a culture of continuous learning and improvement.

- Performed penetration testing on infrastructure, applications, and cloud environments (Azure and AWS).- Participated in a rotational task assignment, gaining exposure to all areas of the Security Operations Center (SOC), including Managed Detection and Response (MDR), Managed Security Services (MSS), and Cyber Threat Intelligence (CTI).- Produced intelligence artifacts to support informed decision-making and strategic planning in the domain of cybersecurity. These artifacts provided valuable information about potential threats and the security posture of the organization and customers.- Evaluated vulnerabilities, searched for cyber threats and incident response.- Developed and maintained cybersecurity software within the organization.- Conducted research on attacks to collaborate with incident response teams, identify threat actors, and understand their Tactics, Techniques, and Procedures (TTP). This research was instrumental in enhancing clients preparedness against potential threats.