Overseeing the company’s security strategy, navigating through all departments to assess their security practices and pointing areas of improvement. Strategizing and proposing tailored solutions to enhance company security measures. My role extends to overseeing and working on a diverse range of projects in both on-premise and cloud environments, implementing vital changes, ensuring a more secure and efficient operational environment and making sure that the company’s procedures are in accordance with the ISO 27001, SOC2 and the company’s security policy.

Led key technical projects in information security, including the implementation of identity providers like JumpCloud and Google Workspace, and next-generation firewalls such as Palo Alto SASE/Prisma Access. Focused on seamless integration of security tools, coordinating effectively with technical teams and end users. Also responsible for conducting thorough assets discovery and vulnerability scanning of critical company assets, ensuring robust security posture.

Managed risk and vulnerability assessments for application pipelines and cloud infrastructure. Responsibilities included identifying vulnerabilities, collaborating with technical teams on effective countermeasures, and enhancing security in CI/CD pipelines and cloud platforms (mainly AWS, Kubernetes, Docker containers). Documented best practices for developers and infrastructure teams, focusing on code scanning and secure deployment of new cloud assets.

Conducted code reviews to ensure adherence to best practices by developers. Managed incident responses, serving as level 3 support for local solutions and level 2 for global solutions. Oversaw vulnerability assessments, maintained APAC server inventory, ensured SIEM coverage, and addressed vulnerabilities. Additionally, developed REST APIs and UIs using JavaScript, Python and PHP.

Managed provisioning and credentialing for users (both internal and external). Executed and oversaw configuration of unified communication tools like Cisco WebEx and Skype for Business.

Contributed to web application development and played a key role in establishing provisioning processes for the Latin American region. Managed provisioning and credentialing for users (both internal and external). Executed and oversaw configuration of unified communication tools like Cisco WebEx and Skype for Business.

Developed complex billing software compliant with Brazilian financial laws. Managed and monitored Linux servers, including usage anomaly detection, firewall configuration, and incident response.

Configured, managed, and monitored Linux servers, firewalls, and Cisco network devices, including routers, switches, and IP phones. Focused on analyzing potential infrastructure failure points and ensuring equipment hardening for enhanced security.