Open to opportunities

André Alexandre

@andralexandre

Message

Information Security Manager with expertise in application security.

Brazil

Message

What I'm looking for

I seek a challenging role in a forward-thinking organization that values security innovation and professional growth.

As an accomplished Information Security Services Manager and Application Security Researcher, I have a proven track record of enhancing security protocols and developing innovative solutions that significantly improve product quality and client satisfaction. My recent role at Rainforest involved pioneering methods for SAST and SCA modules, which not only optimized our internal processes but also expanded our client base by 20% through the introduction of new detection rules for various programming languages.

With extensive experience in leading cybersecurity initiatives, I have successfully implemented security solutions in CI/CD pipelines and fostered a culture of security awareness among development teams. My tenure at TGroup/Confi saw a remarkable 48% increase in Information Security Maturity Level, driven by comprehensive training programs and strategic career development plans that reduced turnover by 80%. I am passionate about leveraging my expertise to drive organizational success and ensure compliance with industry standards.

Experience

Work history, roles, and key accomplishments

Current

Information Security Services Manager

Current

Rainforest - Agility

Sep 2024 - Present (9 months)

Led the development of innovative security solutions, enhancing product quality and compliance with U.S. standards. Conducted competitor analyses and improved vulnerability management processes, significantly increasing client engagement and product range.

SAST SCA Python NIST CSF Vulnerability Management Market Analysis Security Management Compliance Product Positioning

Head of Cyber Security and Development Operations

TGroup/Confi

Jan 2022 - Oct 2023 (1 year 9 months)

Oversaw compliance with LGPD and security frameworks, implemented DevSecOps practices, and enhanced security maturity by 48%. Managed cloud migration and improved employee retention through strategic career development.

DevSecOps Security Cloud Incident Response Vulnerability Management Employee Retention Threat Modeling

Tech Lead

Tembici

May 2021 - Jan 2022 (8 months)

Implemented cost-effective security tools and practices, reducing expenditures by 32%. Focused on enhancing security processes in application deployment and conducted extensive training on security best practices.

SAST DevSecOps Security Risk Analysis Automation OWASP Security Awareness Threat Modeling

Specialist Consultant on IT Infrastructure and Information Security

Galvani Fertilizantes

Feb 2005 - May 2019 (14 years 3 months)

Established the Information Security department, implemented comprehensive security policies, and improved communication and logistics through technology enhancements.

Information Security ISO 27001 Incident Response VPN Security Data Protection Security Policies

Specialist Consultant on IT Infrastructure and Information Security

Yara International

Oct 2017 - May 2019 (1 year 7 months)

Developed IT and security policies, ensuring compliance with ISO standards and LGPD. Led infrastructure migration projects, enhancing system performance and security.

Security Policies ISO 27001 NIST CSF AWS Incident Response VPN Change Management Data Protection

Specialist Consultant on Networks and Unix/Linux Systems

China Construction Bank of Brazil

Jan 2001 - Dec 2006 (5 years 11 months)

Restructured the Information Security Architecture, developed monitoring solutions, and led incident response initiatives, enhancing overall security posture.