Rômulo Rocha Email & Phone Number

Rio De Janeiro, Rio De Janeiro, Brazil

Brazil

Leading a focused team of engineers and SMEs engaged in answering and creating solution of hard questions/problems to SOC. We build/buy tools and platforms to solve problems.- Is that possible to automatize an L1 triage?- How to be effective in grouping, enriching, and correlating security alerts automatically?- How to scale SOC platforms delivering context and usability to incident responders?- How to deliver quality and consistency in incident coordination and… Show more Leading a focused team of engineers and SMEs engaged in answering and creating solution of hard questions/problems to SOC. We build/buy tools and platforms to solve problems.- Is that possible to automatize an L1 triage?- How to be effective in grouping, enriching, and correlating security alerts automatically?- How to scale SOC platforms delivering context and usability to incident responders?- How to deliver quality and consistency in incident coordination and response?- How to make regulators and stakeholders happy with quality data and reports? Show less

Rio De Janeiro, Brasil

Responsible for building an Incident Response Team from scratch, managing a multi-country team, and supporting them to achieve their best work. Starting from day zero to scale up to multiple products and countries. - Building and designing platforms to scale up Security Ops, processing alerts, reducing false positives, and giving autonomy to incident handlers to perform their job.- Managing a diverse multi-country team to help them achieve their best.- After the initial ramp-up… Show more Responsible for building an Incident Response Team from scratch, managing a multi-country team, and supporting them to achieve their best work. Starting from day zero to scale up to multiple products and countries. - Building and designing platforms to scale up Security Ops, processing alerts, reducing false positives, and giving autonomy to incident handlers to perform their job.- Managing a diverse multi-country team to help them achieve their best.- After the initial ramp-up period, we got approved to be a team member of FIRST.org (https://www.first.org/members/teams/nubank_csirt).- Responsible for delivering great services in multiple countries in LATAM, delivering security through services like incident triage, handling, and coordination.- Besides my organization, I'm an active member of FIRST Group which is challenging the status quo and looking for an improvement in how to measure security based on security services, more about our work here (https://www.first.org/global/sigs/metrics/) Show less

Rio De Janeiro, Brazil

Lead Security Engineer at SOC, supporting other engineers and working to scale up our CSIRT team, building:- Metrics to be shared- SOC Process- Incident response capabilities (tooling and process)- Integrations- Strategic roadmap

São Paulo E Região, Brasil

Member of SOC Squad, working with incident investigation and response areas, responsible for delivering a new policy to deal with incidents, handling incidents and coordinating crisis, investigation, and preparing the foundation to scale a CSIRT team.

Rio De Janeiro, Rio De Janeiro

Working at SOC team, responsible for incident response, playbook creation, processes improvement and investigations. - Incident response- playbook creation- Microsoft EDR/ATP Admin- Malware and Forensics analysis on Windows environment

Rio De Janeiro

Information Security consultant, working on incident response and threat hunting.- Working with Splunk to design new rules for SOC;- Forensic investigations and malware analysis;- Log Analysis of webservers, firewalls, ips, authentication tools, active directory, endpoint hardening tools, mobile, etc;- Amazon AWS log analysis;-Deploying and testing solutions for incident response and investigations like Hive, Cortex, Misp and osquery;

Rio De Janeiro Area, Brazil

Incident response leader at CSIRT, member of team responsible to guarantee cybersecurity of Rio 2016 Summer Olympic Games. Our main challenges are, rapid growth of users, relationship with government agencies, multiple partners to coordinate, enormous exposition in global media and complex infrastructure to deal before and during games time.My main responsibilities:- Responsible to develop strategy for Incident Response implementation;- Leader of Incident Response team… Show more Incident response leader at CSIRT, member of team responsible to guarantee cybersecurity of Rio 2016 Summer Olympic Games. Our main challenges are, rapid growth of users, relationship with government agencies, multiple partners to coordinate, enormous exposition in global media and complex infrastructure to deal before and during games time.My main responsibilities:- Responsible to develop strategy for Incident Response implementation;- Leader of Incident Response team (CSIRT);- Threat analysis and incident response using wireshark, paloalto, sourcefire, splunk, symantec sep, symantec atp and others tools. Correlation of events between SIEM, NIPS, MSS and multiple data sources.- Coordination of a team that is doing deployment of multiples security tools as antivirus, data leak protection, cryptography, and software/patch management (Altiris) from our security partner Symantec. (during project phase);- Vulnerability assessment;- Responsible to coordinate incident flow between different teams (gov, partners, sponsors and committees); Show less

Rio De Janeiro Area, Brazil

• Incident Response / Malicious Code Management (AntiVirus, Anti-malware, Phishing) / Vulnerabilities Management) : - Designing and implementation of operational process; - Definition of metrics, executive reports and KPI; - Coordination and Guidance for Incident Response Process (identification and mitigation) - Guidance and Operation Designing for Vulnerability/Threats Management Process (using Mcafee Foundstone) - Outbreak and Crisis Management;… Show more • Incident Response / Malicious Code Management (AntiVirus, Anti-malware, Phishing) / Vulnerabilities Management) : - Designing and implementation of operational process; - Definition of metrics, executive reports and KPI; - Coordination and Guidance for Incident Response Process (identification and mitigation) - Guidance and Operation Designing for Vulnerability/Threats Management Process (using Mcafee Foundstone) - Outbreak and Crisis Management; - Content Filtering Management : - Knowledge of Bluecoat Proxy, Bluecoat Content Filtering and Bluecoat Reporter; • Security Awareness Programs : - Instructor of Security Awareness Programs inside the company, more than 40 classes given. - Responsible of content and program updates;• Mobile Security definitions - Part of group that is creating new policies regarding Mobile Security; - Definition of BYOD policies; - Assessment on OS of different devices as IOS, Windows Mobile and Android; Show less

Rio De Janeiro Area, Brazil

As consultant I did PCI DSS audits, remediation and certification projects, performed auditing process of Security controls like physical security, data cryptography, firewall standards, servers hardening, log management and policies. I did as well implementation of security products like Mcafee Web Security Gateway with SSL Scanner, Vulnerabilities analysis (Mcafee Foundstone, Accunetix and NeXpose), hardening of Windows Servers and penetration testing (Linux tools, Nmap, Nessus, Hydra… Show more As consultant I did PCI DSS audits, remediation and certification projects, performed auditing process of Security controls like physical security, data cryptography, firewall standards, servers hardening, log management and policies. I did as well implementation of security products like Mcafee Web Security Gateway with SSL Scanner, Vulnerabilities analysis (Mcafee Foundstone, Accunetix and NeXpose), hardening of Windows Servers and penetration testing (Linux tools, Nmap, Nessus, Hydra, NetDiscover, Aircrack, etc). Show less

Rio De Janeiro Area, Brazil

As consultant I had the opportunity to work in big companies in Brazil and in different types of segments like oil and gas, insurance, banks and technology. My main projects on those fields were , mapping of IT Controls for compliance (SOX and audit), GRC for SAP and testing of it security controls.

Rio De Janeiro

Help desk giving support to all offices in Brazil (almost 20). The majority of this work was troubleshooting issues related to network operations, windows support and specific printers problems.

Pós Graduação, Msi - Master Of Information Security

Bacharelado, Computer Systems Analysis/Analyst