Open to opportunities

Bruno Reis

@brunoreis1

Message

Offensive Security Engineer bridging threat modeling and engineering to make risk actionable.

Brazil

Message

What I'm looking for

I’m looking for roles where I can run secure design/threat modeling, automate Shift Left reviews, and partner with engineering and the SOC—especially in cloud-native environments—to turn risk into fixes and validated detections.

I’m a Security engineer (OSCP, eMAPT) who works where security meets engineering—turning findings into real exploitability and guiding teams from risk discovery to remediation.

In my current role as Offensive Security Engineer, I lead threat modeling, secure design reviews, and secure code review across applications and infrastructure, with a strong focus on Shift Left / secure SDLC practices.

I drive vulnerability management end to end through penetration testing across web, API, mobile, internal networks, and infrastructure—using risk-prioritized reporting and retesting to validate fixes and prevent regressions.

I also build security automation for testing and reporting workflows (Python, Shell, CLI agents like Claude Code, and MCP Servers) and extend detection and response through Purple Team exercises with the SOC, grounded in MITRE ATT&CK and adversary simulations.

Experience

Work history, roles, and key accomplishments

Current

Offensive Security Engineer

Current

AB InBev

Jan 2025 - Present (1 year 6 months)

Lead threat modeling, secure design reviews, and secure code reviews, guiding development teams on secure SDLC practices. Drive end-to-end vulnerability management with penetration testing, risk-prioritized reporting, retesting, and Purple Team exercises with the SOC.

Threat Modeling Security Design Reviews Secure Code Review Secure SDLC Vulnerability Management Penetration Testing Web Security API Security Mobile Security Automation Python Shell Claude Code MCP Servers Purple Team SOC Authentication Authorization IAM

Cyber Security Analyst/Instructor

Brazilian Army - CIGE

Jan 2022 - Jan 2025 (3 years)

Delivered security assessments and penetration tests across network, infrastructure, and application layers, supporting remediation in operational high-availability environments. Designed and taught cyber warfare training and built labs and graded technical examinations.

Security Assessments Penetration Testing Network Security Infrastructure Security Application Security remediation Lab Development Instruction

IT & Operations Roles

Brazilian Army

Jan 2012 - Jan 2022 (10 years)

Managed servers, networks, satellite communications, and VoIP in remote high-complexity environments, and led operations as Head of IT Section. Supported day-to-day IT and operations responsibilities across communications and infrastructure systems.

server management Network Administration Satellite Communications VoIP IT Operations Remote Operations IT leadership

Education

Degrees, certifications, and relevant coursework

Universidade de Brasília (UnB)

Postgraduate (Lato Sensu), Privacy and Information Security

2025 -

Postgraduate (lato sensu) study in Privacy and Information Security. Thesis in progress: “Integration of Blue and Red Teams: Assessing the Effectiveness of the Purple Team.”