Open to opportunities

André ROdrigues

@andrrodrigues

Message

Cybersecurity analyst and Java backend engineer focused on vulnerability management and secure systems.

Portugal

Message

What I'm looking for

I seek hands-on security roles that combine vulnerability management, application security and pentesting within collaborative teams focused on ISO 27001-aligned, secure-by-design development.

I am a cybersecurity-focused analyst and backend engineer with hands-on experience in vulnerability management, data loss prevention, and secure application development. I have implemented security controls aligned with ISO 27001, conducted Tenable Nessus assessments, and managed DLP tooling such as Microsoft Purview, Trellix and Netskope.

My engineering background includes developing scalable Java backend applications with Spring Boot, building RESTful APIs, working with Oracle SQL/Hibernate, and using tools like Maven, Git and Splunk for monitoring and CI/CD workflows. I have also led teams in the absence of the team lead and improved automation and process efficiencies across security event classification and reporting.

I hold multiple security certifications (e.g., eJPT, ISC2 CC) and practical pentesting experience with Burp Suite, OWASP ZAP, Metasploit, nmap and related tooling. I look to contribute to secure-by-design projects where I can combine application development skills with hands-on offensive and defensive security work.

Experience

Work history, roles, and key accomplishments

Data Loss Prevention Analyst

Indra

Apr 2024 - Sep 2024 (5 months)

Assessed and categorized security events using Microsoft Purview and Trellix, managed Netskope to enforce endpoint data protection policies, and improved event classification automation and email usage awareness across teams.

Microsoft Purview Excel Compliance Automation)

Vulnerability Management Analyst

Indra

Jan 2024 - May 2024 (4 months)

Conducted vulnerability assessments with Tenable Nessus and Armis Centrix, identified and mitigated critical system weaknesses, and implemented security controls aligned with ISO 27001.

Nessus Armis Centrix Vulnerability Assessment ISO 27001)Asset Management

Junior Systems Engineer

Indra

Oct 2020 - Jan 2024 (3 years 3 months)

Developed scalable backend applications and RESTful APIs with Java 8 and Spring Boot, ensured code quality with JUnit4 and Git/TFS, managed data persistence with Hibernate on Oracle SQL, and deployed on Oracle WebLogic while monitoring systems with Splunk.

Java Spring Boot Hibernate Oracle RESTful APIs Maven Git Oracle Weblogic Splunk

Education

Degrees, certifications, and relevant coursework

INE Security

Junior Penetration Tester (eJPT) Certification, Penetration Testing

Earned the Junior Penetration Tester (eJPT) certification to validate practical penetration testing skills.

Hack The Box

Professional Certifications, Offensive Security / Penetration Testing

Completed offensive security certifications including AI Red Teamer (Job Role Path) and Hack The Box Certified Bug Bounty Hunter.

ISC2

Certified in Cybersecurity (CC), Cybersecurity

Obtained the ISC2 Certified in Cybersecurity (CC) certification covering foundational cybersecurity concepts.

Armis University

Armis University Full Certification Track, IoT/OT Security

Completed the Armis University full certification track focused on asset discovery and IoT/OT security.

Instituto Superior de Engenharia de Lisboa (ISEL)

Degree in Computer and Multimedia Engineering, Computer and Multimedia Engineering

Completed a degree in Computer and Multimedia Engineering with coursework covering software development, systems engineering, and multimedia technologies.