Open to opportunities

Lucas Banker

@lucasbanker

Senior Vulnerability Management Engineer | CTEM Specialist | Attack Path Analysis & Risk-Based Prioritization | CrowdStrike Falcon

Brazil

Message

What I'm looking for

I’m looking for a global enterprise security role where I can run CTEM and risk-based vulnerability management, use attack path analysis with CTI, and deliver automation that reduces MTTR while improving business-context mitigation priorities.

I am a Cybersecurity Specialist focused on Continuous Threat Exposure Management (CTEM) and Risk-Based Vulnerability Management integrated with Cyber Threat Intelligence (CTI). My expertise lies in transforming overwhelming vulnerability data into threat-informed risk mitigation by leveraging advanced Attack Path Analysis and Cyber Threat Intelligence (CTI).

What I bring to global enterprise environments:
- CTEM & Automation: Engineered automated pipelines integrating CrowdStrike Exposure Management with Jira (ITSM) and Active Directory to dynamically triage risks and reduce MTTR.
- Risk Prioritization: Shifted organizations from generic CVSS scores to business-context prioritization using CISA KEV, EPSS, zero-day intel, and critical attack path mapping.
- Full-Scale Infrastructure: Mapping exposures across hybrid architectures, cloud infrastructure, Kubernetes clusters, and industrial networks (OT).
- Holding a degree in Cyber Defense and an post-graduation specialization in Corporate Cybersecurity Management, I bridge the gap between technical threat engineering and business metrics for enterprise leadership.

⚡ In Progress: Certified Red Team Operator I (CRTO) & Red Team Lead (CRTL) from Zero Point Security.

Experience

Work history, roles, and key accomplishments

Current

CTEM/VM Security Lead

Current

Midway

Jan 2026 - Present (6 months)

Finance, Retail & Mfg Experience: Lead Vulnerability Management and CTEM programs across workstations, on-prem, multi-cloud, and Kubernetes. Prioritize risks via CTI and attack paths. Orchestrate automation with ITSM tools. Support incident response and ensure compliance with ISO 27001, NIST, SOC 2, and BCB 4,893.

Cybersecurity Information Security Crowdstrike Jira Threat Intelligence Vulnerability Management Continuous Threat Exposure Management (CTEM)

Endpoint Security Leader

Midway

Jan 2025 - Dec 2025 (11 months)

Finance, Retail & Mfg Experience: Led technical strategy and administration for Endpoint Security. Managed and optimized CrowdStrike Falcon, Skyhigh Proxy, and Trellix DLP. Enforced policies (USB block/malicious web), managed IOCs/IOAs, and collaborated with CTI/IR for threat hunting. Served as technical lead for incident response and posture hardening.

Cybersecurity Endpoint Security Crowdstrike Proxy DLP Administration Incident Response Threat Intelligence

IS internal Auditor (ISO 27001)

Mantu

Mar 2025 - Jul 2025 (4 months)

Industry: Financial
Internal audit (ISO 27001 & NIST CSF) for BNP Paribas Bank

• Temporary security audit engagement
• ISO 27001 internal audits
• NIST Cybersecurity Framework (CSF) alignment assessment
• Information security processes and controls validation
• Information security control evidence analysis
• Security gap analysis and reporting
• Physical data center audits and walkthroughs

Cybersecurity Information Security Auditing Security Audits ISO 27001 Lead Auditor ISO 27005 Risk Manager NIST CSF NIST RMF

Principal InfoSec Consultant (GRC)

Safra Bank

May 2024 - Dec 2024 (7 months)

Financial Industry Experience: Led GRC & TPRM lifecycles as primary contact. Assessed third-party risks, validating controls, evidence, and certifications (ISO 27001, CSA STAR, SOC 2). Enhanced security governance and ensured strict compliance with Banco Central do Brasil (BCB) Resolution No. 4,893.

TPRM GRC PCI DSS ISO 27001 NIST 800 53 NIST CSF Cybersecurity ISO 27005 Risk Manager SAP Ariba Securiti.AI

Security Engineer

L'Oréal

Oct 2021 - Jun 2024 (2 years 8 months)

Cosmetics & Mfg Experience: Managed web, e-commerce, and on-prem server vulnerabilities. Coordinated pentests and AppSec (SAST, DAST, SCA), prioritizing risks by business context. Conducted threat intelligence (CTI) and supported incident response. Evaluated third-party architectures, managed GRC/TPRM lifecycles, and delivered security awareness programs.

Cybersecurity Vulnerability Management ServiceNow Crowdstrike Web Application Security CTI Threat Intelligence Threat Modeling TPRM GRC PCI DSS ISO 27001 NIST 800 53 NIST CSF

Vulnerability and Patching Consultant

AB InBev

Oct 2022 - Feb 2024 (1 year 4 months)

Industry: Brewery, Consumer Goods.

• Managed Change Management processes
• Managed patch management and deployment
• Managed vulnerability management for cloud servers
• Led the Vulnerability Management and Patch Management lifecycle

Cybersecurity Vulnerability Management Patch Management ServiceNow

Incident Response and CTI Analyst

Natura & Co.

Jul 2021 - Sep 2021 (2 months)

Industry: Cosmetics/Consumer Goods and Manufacturing.

• Incident response
• EDR administration
• Identity security incident response
• Conducted Cyber Threat Intelligence (CTI) analysis and reporting
• Managed Indicators of Compromise (IOCs)

Cybersecurity Crowdstrike XDR SIEM Threat Intelligence CTI

Security Operations Center Analyst (L3)

ISH

Apr 2021 - Jun 2021 (2 months)

Industry: Cybersecurity Services, MSSP.

• Administered and tuned security tools
• Provided advanced support for the MSS SOC

Cybersecurity MSSP Firewalls Web Application Security Endpoint Security

Security Operations Center Analyst (L2)

Future Information Security

Jul 2020 - Mar 2021 (8 months)

Industry: Cybersecurity Services, MSSP.

• Administered and tuned security tools
• Provided Level 2 (L2) support for the MSS SOC

Cybersecurity MSSP Firewalls Web Application Security Endpoint Security

Security Operations Center Analyst (L1)

Future Information Security

Dec 2017 - Jun 2020 (2 years 6 months)

• Monitored network and security tools
• Administered and tuned security tools
• Provided Level 1 (L1) support for the MSS SOC

Cybersecurity MSSP Firewalls Web Application Security Endpoint Security

Infantry Soldier

Brazilian Army

Mar 2011 - Feb 2012 (11 months)

• Discipline and accountability
• Teamwork and leadership
• Operational planning and execution
• Decision-making under pressure
• Adaptability and resilience
• Attention to detail
• Commitment to mission objectives

National Security