Conduction of security code review and threat modeling, enforcing security in the software development lifecycle (SSDLC).Execution of security tests (SAST, DAST, IAST, SCA and Secret Scan).

Performed web application and network penetration testing.

Leaded security consulting projects like vulnerability analysis, penetration tests, firewall rules hygienization, assessment and adequacy of cybersecurity controls, data privacy, business continuity planning and security awareness.Performed cybersecurity support operations (SOC) for clients, such as changing security policies in Firewalls, editing filters in email and proxies or investigating a potential cyber threat.Implemented security management tools, such as firewalls, URL filtering, DLP, VPN, EDR/XDR, password vault, SSO, multi-factor authentication.

Developed privacy program, involving assessment and implementation of processes to the brazilian General Data Protection Law (LGPD) and General Data Protection Regulation (GDPR).Elaborated documents for management of personal data processing, such as record of processing activities (RoPA) and data protection impact assessment (DPIA), PII data flow design, understanding of the data life cycle, data mapping with BigID and OneTrust, privacy policy, incident response, data disposal plan and anonimyzation of personal data.

LGPD: Diagnosis and optimization of processes to the brazilian General Data Protection Law; Data tracking using a Data Discovery tool for mapping and reporting personal data.Salesforce: integration with ERP using RESTful APIs; development of screens using Lightning and Aura components; Apex development for data management.

Analysis of customer data for billing. Polishment and optimization of queries in SAS, providing bases for the development of models.

Server administration and support for internal users, answering tickets to the IT department.