In charge of the creation of the area of offensive security, and the coordination of its nine members specially dedicated to penetration tests and researchers. Providing not only to Stone Co but also the entire Arpex holding with companies like Pagar.me, Mundipagg, Equals, Cappta and Elavon ethical hacking and all it's best practices.- Adversary Tactics - Red Team Operations- Attack and Penetration engagements.- ResearchesFounder of STOlabs, a research group responsible for the discovery of more than 40 vulnerabilities found, and reported on solutions adopted worldwide.

ResearchesEthical HackingRed TeamPentest

Just another pirate in the web & mobile’s pentesting and vulnerability analysis team

In charge of the creation of the area of offensive security, and the coordination of its nine members specially dedicated to penetration tests and researchers. Providing not only to Stone Co but also the entire Arpex holding with companies like Pagar.me, Mundipagg, Equals, Cappta and Elavon ethical hacking and all it's best practices.- Attack and Penetration engagements.- Researches- Malware analysisFounder of STOlabs, a research group responsible for the discovery of more than 40 vulnerabilities found, and reported on solutions adopted worldwide.

Working with the Information Security practice, acts as the main technical focal point for the Attack & Penetration engagements supporting senior management in developing new business opportunities in the cyber security field. • Full time dedicated to Attack and Penetration engagements.• Delivered network and application penetration testing for many of the largest companies in Brazil. Clients include leaders from mining, banking, telecommunications, broadcasting, and health insurance industries.• Development of a data collection tool to process information for cyber threat intelligence services..• Developed tools, scripts and custom made exploits.

• Conducting research in major appliances and applications used in the market for structuring knowledge in Risk and Compliance.• Achievement of mappings between requirements of IT standards and security settings in IT systems.

• Responsible for monitoring and intrusion detection internet access provider.• Installation and configuration of Firewall solutions, NIDS, IPS, HIDS, (Linux, Cisco, snort, ossec, ossim, sourcefire). • Analysis of vulnerability and penetration testing on the infrastructure of the company, in order to identify and mitigate potential vulnerabilities.

• Responsible for managing the area of information technology (administration and development budget budgeting, contracts, deployment of new technologies.• Also responsible for activities and safety routines on Linux servers, CISCO Firewall, Iptables configuration, IDS, NIDS, HIDS( snort, ossec, ossim, sourcefire).• Penetration testing in web application and infrastructure.

• Responsible for security administration activities in Firewall CISCO, AKER, Linux servers, as well as iptables, IDS, NIDS, HIDS and hardening.• Execution of penetration testing and vulnerability analyses in web applications, as well as development and presentation of reports using the ISO 27002 framework. • Development of tools, scripts, and exploits that were used for testing activities for invasion in web applications and infrastructure.• Also responsible for coordinating a team of 5 professionals in information security and 10 infrastructure.

• Responsible for management of the area of information technology (administration and development budget budgeting, contracts, deployment of new technologies.• Also responsible for activities and safety routines on Linux servers, CISCO Firewall, Iptables configuration, IDS, NIDS, HIDS( snort, ossec, ossim, sourcefire).• Penetration testing in web application and infrastructure.

• Execution of penetration testing and vulnerability analyses in web applications, as well as develop-ment and presentation of reports using the ISO 27002 framework. • Development of tools, scripts, and exploits that were used for testing activities for invasion in web applications and infrastructure.

• Responsible for security administration activities in Firewall, Linux servers, as well as iptables, IDS, NIDS, HIDS and hardening.• Development of tools, scripts, and exploits that were used for testing activities for invasion in web applications and infrastructure.