Looking for a job

daniel rocha

@danielrocha5

AI Security Engineer at Extreme Digital Solutions securing Copilot Studio and Azure OpenAI agents, with an upstream fix credited for Talon.

Brazil

Message

What I'm looking for

I’m open to fully remote positions with overlap to North American (EST/PST) and European (CET) business hours.

At Extreme Digital Solutions, consulting to SEFAZ-RJ, I threat-model agent and RAG architectures built on Copilot Studio, Azure OpenAI Service, and Azure AI Search. I designed an MCP Gateway and a Java/Spring AI MCP Server Template, validated with 234 automated tests.

I also proposed and received approval for an adversarial-testing workstream for the agency’s AI agents. My work covers prompt injection, jailbreaks, and RAG data leakage, with the first pilot running on synthetic data in an isolated environment.

As an independent researcher, I created DUEL, an open LLM-vs-LLM red-teaming framework, and published a preprint and a 1,038-record adversarial dataset. I audited the initial results, published an errata, and expanded the benchmark to 13 models.

Before AI security, I worked on detection engineering and Purple Team operations for Rio de Janeiro State’s tax infrastructure. I designed more than 30 KQL detections and built SOAR automation that reduced MTTR by 60%; my Talon vulnerability-research pipeline also led to an upstream fix in cilium/tetragon credited to me.

Experience

Work history, roles, and key accomplishments

Current

AI Engineer (Security-focused)

Current

Extreme Digital Solutions (EDS)

Jun 2026 - Present (5 months)

Threat-model agent and RAG architectures built on Copilot Studio, Azure OpenAI Service and Azure AI Search for a state treasury agency. Designed an MCP Gateway and Java/Spring AI MCP Server Template, and proposed an adversarial-testing workstream.

Microsoft Copilot Studio Azure OpenAI Azure AI Search RAG MCP Python Java Spring AI Langfuse Threat Modeling Prompt Injection AI Governance

Cybersecurity Technical Lead – Purple Team

Extreme Digital Solutions (EDS)

Aug 2025 - Jun 2026 (10 months)

Ran adversarial Purple Team exercises with MITRE ATT&CK as ground truth. Led detection engineering for the tax infrastructure of Rio de Janeiro State, designing 30+ KQL detection rules and building SOAR automation that reduced MTTR by 60% and false positives by 40%.

Purple Team MITRE ATT&CK Detection Engineering KQL Microsoft Sentinel SOAR Microsoft Security Copilot Threat Hunting

Information Security Coordinator (Acting)

State Treasury Secretariat (SEFAZ-RJ)

Jan 2024 - Aug 2025 (1 year 7 months)

Directed Purple Team simulations and led threat hunting and detection tuning across Microsoft Defender XDR and Sentinel. Implemented identity governance and Zero Trust architecture with Microsoft Entra ID and Conditional Access.

Defender XDR Microsoft Sentinel Threat Hunting Detection Tuning Microsoft Entra ID Conditional Access Zero Trust Identity Governance

Cybersecurity Analyst (Mid-Level)

State Treasury Secretariat (SEFAZ-RJ)

Apr 2021 - Jan 2024 (2 years 9 months)

Conducted detection engineering, threat hunting and incident response across hybrid cloud environments protecting financial infrastructure. Reduced alert fatigue through KQL rule tuning, SIEM optimization and process standardization.

Detection Engineering Threat Hunting Incident Response KQL Microsoft Sentinel Defender XDR SIEM

Cybersecurity Analyst (Junior)

State Treasury Secretariat (SEFAZ-RJ)

Jan 2020 - Apr 2021 (1 year 3 months)

Managed endpoint security for 3,400+ devices with Microsoft Intune and Defender for Endpoint, reducing vulnerability exposure from 80% to 25%. Supported incident response while maintaining security SLA compliance.

Microsoft Intune Microsoft Defender For Endpoint Vulnerability Management Incident Response