Since January 2026, I’ve worked as an Analista de Governança, Conformidade e Segurança de TIC in a critical infrastructure and high-availability environment. I contribute to cybersecurity procurement planning for EDR/XDR, NDR, and SOC solutions, applying IN SGD/ME nº 94/2022 and Lei nº 14.133/2021.
In this role, I prepare and review technical procurement documents and support risk analysis and control reviews. I also administer groups, profiles, and permissions in Active Directory and Keycloak, supporting authentication, authorization, and least-privilege access.
In my own documented Homelab SOC project, I use Wazuh, Splunk, Suricata, and Sysmon to collect and analyze logs and investigate suspicious activity. I applied hardening based on the CIS Microsoft Windows 11 Enterprise Benchmark and improved compliance from 24% to 87%, documenting evidence and simulating SOC N1 alert triage and escalation.
Before moving into direct IT and cybersecurity work, I worked in mission-critical institutional operations from September 2010 to December 2025, focusing on risk, compliance, and operational decision-making. My background includes a bachelor's degree in Law and a technologist degree in Cyber Defense, alongside ongoing training in Blue Team, GRC, network security, and OT/ICS security.
