Open to opportunities

Felipe Martins

@felipemartins

Senior Cyber Security Engineer at Spencer Stuart, assessing web applications, APIs, networks, and wireless systems while supporting vulnerability management.

Ireland

Message

At Spencer Stuart, I assess application security using DAST and SAST, and conduct network, wireless, API, and web application penetration tests. My work also includes vulnerability management, threat intelligence, and security operations.

As an Independent Security Researcher, Penetration Tester, Author at Independent Consultant, I contribute part-time to bug bounty programs and write and review security articles and technical papers. Earlier, at Integrity360 and Future Security, I performed security assessments and penetration tests across networks, wireless systems, web applications, and mobile applications.

Experience

Work history, roles, and key accomplishments

Current

Senior Cyber Security Engineer

Current

Spencer Stuart

Oct 2018 - Present (8 years)

Application Security Assessment and consultation (DAST, SAST)
Network, Wireless, API and Web Application Penetration Test
Vulnerability Management
Threat Intel and Brand Monitoring
WAF / RASP Design, Deployment and Support
Security Modeling and consultation
Security Operations and Incident Handling

Current

Independent Security Researcher, Penetration Tester, Author

Current

Independent Consultant

Jun 2016 - Present (10 years 4 months)

Contributing part-time to Bug Hunt public (BugCrowd, HackerOne) and private platforms as a Security Researcher.
Author and reviewer of technical papers, articles and studies for different security magazines (Hakin9, Pentester Magazine, etc).
Active blogger, authoring several security related articles and online training.
CTF & Wargames enthusiast.

Senior Security Consultant

Integrity360

Nov 2015 - Oct 2018 (2 years 11 months)

Responsible for security assessments such as network, wireless, web application and mobile penetration tests. Build review based on Linux, Network, Windows, and firewall configurations.

Information Security Analyst

BTG Pactual

Mar 2014 - Oct 2015 (1 year 7 months)

Responsible for security operations in more then 30 countries, in the following:
- External/Internal Threat/Vulnerability Scan, Monitoring and Analysis
- Network and Web Application Internal and External Pentesting based on OSSTMM, PTES, NIST, OWASP and EC-COUNCIL Methodologies.
- Development of scripts and softwares to aid in Internal/External Pentesting, so as internal Linux Server and Network

Security Specialist and New Security Solutions Engineer

Future Security

Feb 2012 - Mar 2014 (2 years 1 month)

Lead member of the Pentesting Study Cell and also responsible for Physical and Logical
Penetration Tests (External and Internal, White Box, Gray Box and Black Box) in customers,
with documentation and operation based on the OSSTMM, NIST, OWASP and CEH
methodologies, using BackTrack Linux Distribution, Scanners (NeXpose, Accunetix, Nessus,
Nikto, nmap, and others), Hands on tests, network programmi

Security Specialist and Projects

Future Security

Jan 2011 - Mar 2014 (3 years 2 months)

• Technical Project Development for Network and Security and Integrated Solutions. Linux/Unix/Windows Server configuration.
• SIEM Tools (ArcSight, Imperva)
• Firewall Projects (CheckPoint, Iptables, FortiNet)
• IDS/IPS (Snort, Imperva, amongst others)
• Hardening Linux Servers (Red Hat, Debian, CentOS, Slackware, and other flavors)
• High Availability Firewalls and Application Servers using Hear

Senior Deployment Analyst II

ALOG Data Centers do Brasil

Jul 2008 - Dec 2010 (2 years 5 months)

• Developing integrated network and security Data Center solutions.
• Linux/Unix/Windows Servers like Firewall, High Availability, VPN (IPSec, PPTP, L2TP), Heartbeat, vrrp, drbd, system integration with MTAs (Postfix, qmail, exim, sendmail, zimbra), DNS, among others.
• Data Center Rack projects, switches (Cisco, Accton). Virtualization using VMWARE, XEN and Hyper-V.

Teacher and Infrastructure Courses Coordinator

Instituto Infnet

Jul 2007 - May 2009 (1 year 10 months)

• Contact with partners on training
• Partners: Red Hat, Furukawa, LPI, others
• Coordination of Infra Structure Security and Operating System courses
• Responsible for all Study Material, update, upgrade and development
• Ministering Red Hat Official Curriculum Courses, System and Network Administration, Network Troubleshooting
• Linux Security courses with Linux, IDS, IPS, Squid, IPTables, Tripw

Sr. IT Analyst

Mundivox Communications

Mar 2002 - Sep 2006 (4 years 6 months)

• Network Projects for Companies
• Network Solution Development in Corpate Environment, video conference, VOIP, equipment research,
• Development, Maintenance, and Security of Unix (Solaris, FreeBSD) , Linux (Debian, Slackware, Red Hat) and Windows Servers
• Internet and Network services maintenance and solution development on Apache HTTP, Samba, VPN, MRTG, RRDTOOL, IPTables, Qmail, Sendmail, Pos

Support Analyst

Axa Suporte

Mar 2001 - Jul 2002 (1 year 4 months)

• Client Remote Network and Internet Support
• Working with aprox. 40 Internet Service Providers like Skydome, Tripnet, Microlink, RJNet, ImageLink, Marlin, Urbi, Internexus and others.
• Network and Internet Support based on MTAs, Servers, Internet Services and others.
• Network and Internet Support on Microsoft Windows 98, ME, XP, 2000, 2003, GNU-Linux and others.

Support Analyst

Matrix Internet S.A.

Mar 1998 - Sep 2001 (3 years 6 months)

• Network and Internet Support to Microsoft Windows 98, XP, 2000, 2003, GNU Linux.
• Client On Site Support.
• Internet and Network Software Support like Browsers, MTAs and others.
• Internet Services Support like http, sendmail and others.