Open to opportunities

Leonardo Muraroto de França Reis

@leonardomurarotodefr

Senior security support and cybersecurity consultant delivering secure operations, incident response, and detection engineering across Microsoft ecosystems.

Brazil

Message

What I'm looking for

I’m looking for a role where I can own incident response and security engineering end-to-end—combining Microsoft Security & Compliance, Sentinel/XDR detection work, and automation to improve SOC maturity, reduce recurring incidents, and accelerate secure deployments.

I’m a Senior Support Engineer and cybersecurity leader focused on security & compliance, incident response, and secure deployment across Microsoft Exchange Server, Exchange Online, and Microsoft 365. In my current role, I deliver enterprise-level technical support and security engineering for Premier customers, owning complex high-severity incident resolution with root cause analysis, preventive actions, and formal post-incident reviews.

I also founded and operated Technology HXD Consulting, delivering long-term security consulting for international clients. My work has included SOC maturity improvements, KPIs, detection engineering, automation playbooks, and security monitoring aligned to the MITRE ATT&CK framework—using Microsoft Sentinel and Microsoft Defender XDR alongside CrowdStrike Falcon and Azure security services.

Earlier, I led the LATAM Cyber Defense Center at DXC Technology, where I improved SOC responsiveness by 40% through workbooks and dashboards, and increased operational efficiency by 35% with API-based automation. Before that, at EBANX, I revamped incident response standards around NIST SP 800-61 and improved vulnerability resolution time by 30%, scanning accuracy by 25%, and reduced false positives by 20% through XDR tuning.

Experience

Work history, roles, and key accomplishments

Current

Senior Support Engineer

Current

Microsoft

Jun 2024 - Present (2 years 1 month)

Provide enterprise-level technical support and security engineering for Premier customers running Microsoft Exchange Server and Exchange Online/Microsoft 365. Administer and troubleshoot DLP, Sensitivity Labels, eDiscovery, Auditing, and Microsoft Defender for Office 365/Exchange security capabilities, owning complex incident resolution and RCAs.

Microsoft Exchange Server Exchange Online Microsoft 365 Microsoft Purview Sensitivity Labels eDiscovery Auditing Microsoft 365 Defender Microsoft Defender Incident Response Root Cause Analysis Security Engineering Threat Detection

Current

Founder & Principal Cybersecurity

Current

Technology HXD Consulting

Apr 2024 - Present (2 years 3 months)

Founded and led a cybersecurity consulting firm delivering security operations, cloud security, Microsoft security, and incident response services to international clients. Built SOC maturity improvements and detection engineering aligned with MITRE ATT&CK, including custom KQL detections and Sentinel automations using APIs, PowerShell, and Python.

Security Operations Cloud Security Microsoft Security Incident Response Azure Security Detection Engineering Vulnerability Management Security Architecture Executive Reporting Sentinel Workbooks APIs PowerShell Python Microsoft Copilot Monitoring

SOC & SIEM CSIRT Specialist

DXC Technology

Jul 2022 - Feb 2024 (1 year 7 months)

Led development of the LATAM Cyber Defense Center, focusing on security vulnerability management, EDR, and penetration testing. Monitored SIEM environments, improved analytical rules and dashboards, and implemented API-based integrations to automate SOC workflows and increase operational efficiency.

Security Vulnerability Management EDR Penetration Testing SIEM CSIRT運用 Threat Hunting Log Analysis Analytical Rule Tuning Detection Engineering Monitoring Dashboards API Integration Automation

Cyber Security Analyst

EBANX

Feb 2020 - Jun 2022 (2 years 4 months)

Revamped incident response and reporting standards aligned to NIST SP 800-61 for ISO27001 and PCI-DSS compliance. Implemented and maintained vulnerability management and scanning tooling, and improved XDR policies to enhance threat detection while reducing false positives.