10/13/2024 updated
100 % available
SOC specialist with a focus on reducing MTTR by integrating SIEM, SOAR and generative AI
Fortaleza, Brazil
Worldwide
Degree in Information Technology ManagementAmazon Web ServicesMicrosoft AzureCloud Computing SecurityIncident ResponseISO/IEC 27001Network SecurityOperations SecurityOWASPSecurity Information and Event ManagementTcpdumpWiresharkVirtualizationVulnerability ManagementNational Institute of Standards and Technology (NIST)QRadar
SOC and Incident Response
Extensive experience in Security Operations Center (SOC) management, incident response, and vulnerability management.
Security Information and Event Management (SIEM)
Proficiency in SIEM tools such as Rapid7, QRadar, and Splunk for effective threat detection and analysis.
Network Security
Expertise in network security tools including Wireshark, Tcpdump, and various firewalls like Fortigate and WatchGuard.
Cloud Security
Knowledge of cloud security platforms including Azure and AWS.
Endpoint Detection and Response (EDR)
Experience with EDR tools such as Crowdstrike, Carbon Black, and SentinelOne.
Compliance and Frameworks
Familiarity with security frameworks and standards including NIST, ISO 27001, MITRE, CIS, and OWASP.
Virtualization and Container Security
Proficiency in securing virtualized environments using tools like Rapid7, Tenable, and Qualys.
Extensive experience in Security Operations Center (SOC) management, incident response, and vulnerability management.
Security Information and Event Management (SIEM)
Proficiency in SIEM tools such as Rapid7, QRadar, and Splunk for effective threat detection and analysis.
Network Security
Expertise in network security tools including Wireshark, Tcpdump, and various firewalls like Fortigate and WatchGuard.
Cloud Security
Knowledge of cloud security platforms including Azure and AWS.
Endpoint Detection and Response (EDR)
Experience with EDR tools such as Crowdstrike, Carbon Black, and SentinelOne.
Compliance and Frameworks
Familiarity with security frameworks and standards including NIST, ISO 27001, MITRE, CIS, and OWASP.
Virtualization and Container Security
Proficiency in securing virtualized environments using tools like Rapid7, Tenable, and Qualys.
Languages
EnglishFluentPortugueseNative speaker
Project history
Leading the SOC team, responsible for designing, implementing and improving the IBM SIEM QRadar. Monitoring, detecting, investigating and responding to information security incidents. Planning and monitoring the team's activities using agile methodology and tools.
Led the security incident response and vulnerability management operations team. Monitored and analyzed events and alerts from sources such as Azure, AWS, Carbon Black and Security Scorecard. Investigated and responded to security incidents, including malware infections and phishing attacks.
Led the security incident response and vulnerability management operations team. Monitored and analyzed events and alerts from sources such as InsightIDR (SIEM/XDR), InsightIVM (Vulnerability Analysis), Crowdstrike Falcon (EDR), Cloudflare (WAF) and Security Scorecard.
Certificates
EC-Council Certified Incident Handler – ECIH
EC-Council2024
QRadar SIEM Practitioner Advanced
IBM2024
CompTIA Cybersecurity Analyst – CySA+
CompTIA2022
CompTIA Security Analytics Professional – CSAP
CompTIA2022
CompTIA Security+
CompTIA2016
ISO 27001 - Information Security Foundation
EXIN2014