Looking for a job

bernardo santos

@bernardosantos1

Message

I lead hands-on enterprise security operations, strengthening endpoint, detection, and incident-response capabilities.

Portugal

Message

What I'm looking for

I'm looking for hands-on security leadership or consulting work where I can strengthen enterprise detection, endpoint security, incident response, and automation for customers across Europe.

I lead the technical security team at ITGest IS while remaining hands-on across enterprise endpoint, EDR/XDR, DLP, PAM, vulnerability management, and daily incident triage.

I've deployed and supported multi-vendor security platforms for environments exceeding 1,200 workstations and 300 Windows/Linux servers, tuning detections, reducing false positives, hardening endpoints, and supporting incident investigations. I'm also developing Python-based security automation and AI-assisted response tooling.

Experience

Work history, roles, and key accomplishments

Current

Information Security Team Leader

Current

ITGest IS

Jun 2026 - Present (3 months)

Technical lead of the security team, coordinating workload and priorities while remaining hands-on. Acts as escalation point for complex issues and main technical contact for customers, defining response playbooks and supporting incident response.

Security Operations Incident Response Root Cause Analysis Playbooks Team Leadership FortiEDR FortiEndpoint FortiClient EMS FortiDLP FortiPAM FortiAuthenticator FortiAnalyzer FortiGate Fortimanager MITRE ATT&CK

Security Consultant

ITGest IS

Nov 2024 - Jun 2026 (1 year 7 months)

Implemented, deployed, and onboarded enterprise security solutions, with daily support and triage of security events. Focused on Fortinet stack, detection tuning, and endpoint hardening across customer environments.

FortiEDR FortiEndpoint FortiClient EMS FortiDLP FortiPAM FortiAuthenticator FortiAnalyzer FortiGate Fortimanager Detection Tuning Hardening De Endpoints MITRE ATT&CK Incident Response

Security Consultant

A2IT Tecnologia S.A.

Aug 2018 - Nov 2024 (6 years 3 months)

Implemented, deployed, migrated, and supported enterprise security solutions, managing environments with over 1,200 workstations and 300 servers. Performed daily security event analysis, detection tuning, and root cause analysis.