Lucas Tosti
@lucastosti
IAM Consultant at OPLIUM, handling CyberArk environments with 8,000+ accounts across Self-Hosted and Privilege Cloud deployments.
BrazilWhat I'm looking for
At OPLIUM, I serve as the Tier 3 escalation point for CyberArk MSS operations and manage environments with 8,000+ accounts across Self-Hosted and Privilege Cloud deployments. I also develop automations to reduce manual effort in PAM operations.
Earlier, at ISH Tecnologia, I supported CyberArk implementation and PAM operations, including privileged account onboarding and least-privilege policies. At byx and Seguros Sura, I worked across information security, incident response, vulnerability management, and access management.
Experience
Work history, roles, and key accomplishments
IAM Consultant
OPLIUM
Aug 2026 - Present (2 months)
- Serve as the final escalation tier (Tier 3) in the CyberArk MSS operation, resolving complex incidents escalated from lower support levels
- Manage CyberArk environments with 8,000+ accounts, across both Self-Hosted and Privilege Cloud deployments
- Work across the CyberArk portfolio: PAM (Vault, CPM, PSM, PVWA), CyberArk Identity, Secure Web Sessions (SWS) and Endpoint Privilege Manager (EPM)
-
Identity and Access Management Consultant (IAM/PAM)
Apr 2026 - Aug 2026 (4 months)
Worked as Identity and Access Management Consultant (IAM/PAM) at Vision Cybersecurity.
• Working on implementation and support projects for Privileged Access Management (PAM) solutions with a focus on CyberArk.
• Supporting the onboarding of privileged accounts, vault configuration, and maintenance of CyberArk environments.
• Providing access through PSM (RDP/SSH) and assisting in the definition of least privilege policies.
• Participating in access governance activities and collabo
Information Security Analyst
byx
May 2025 - Nov 2025 (6 months)
- Continuous monitoring of SIEM (Wazuh), EDR, IDS/IPS, firewalls, and network traffic.
- Proactive threat hunting and event correlation to detect complex incidents.
- Incident Response: containment, machine isolation, IP blocking, credential revocation.
- Development and execution of SOAR playbooks, accelerating response and standardizing procedures.
- Identity and access management (Micro
Information Security Analyst
Seguros Sura
Jan 2025 - May 2025 (4 months)
- Vulnerability management and monitoring (SOX DSS05 C13 and C14)
- Planning and execution of Red Team operations (Pentest, Phishing, Ransomware campaigns, etc.)
- Threat and vulnerability scanning and monitoring (Qualys, Sentinel SIEM, EDR, OSINT)
- Access Management (Active Directory, SSO, API's in DevOps flow)
- Privileged access management (CyberArk PAM)
- Development, improvement of processes
Information Security Assistant
Seguros Sura
Aug 2023 - Jan 2025 (1 year 5 months)
Worked as Information Security Assistant at Seguros Sura.
Information security trainee
Seguros Sura
Mar 2023 - Aug 2023 (5 months)
Worked as Information security trainee at Seguros Sura.
Técnico de TI
Campos Contabilidade e Consultoria Ltda.
Feb 2022 - Mar 2023 (1 year 1 month)
Worked as Técnico de TI at Campos Contabilidade e Consultoria Ltda..
Education
Degrees, certifications, and relevant coursework
CyberArk
PAM-DEF
Mar 2026
Ka Solution
Microsoft Azure Fundamentals (AZ-900)
Feb 2025
Ka Solution
Information Security Foundation based on ISO IEC 27001 (ISFS)
Jan 2025
TIexames
Materializando a atuação do SOC (Security Operations Center)
Sep 2025
Universidade Anhembi Morumbi
Bacharelado, Ciência da Computação
2021 - 2024
Solyd Offensive Security
Introdução ao Hacking e Pentest 2.0
Jan 2024
Alura
Redes onboarding: uma perspectiva prática
Jun 2023
Alura
Pentest: explorando vulnerabilidades em aplicações web
Jun 2023
Alura
Engenharia de requisitos: como levantar, documentar e validar
Apr 2022
Alura
Algoritmos com JavaScript II: aprofundando em algoritmos de ordenação e busca
Aug 2022
Alura
JavaScript I: algoritmos de ordenação
Jul 2022
Alura
JavaScript: Arrays
Jul 2022
Alura
JavaScript: objetos
Jul 2022
Alura
JavaScript: tipos, variáveis e funções
Jul 2022
Alura
UML introdução: modelagem de soluções
Apr 2022
colégio santa rita
Ensino Médio Profissionalizante (Pós-médio), Tecnologia da Informação
2017 - 2020
Ensino médio completo e formado no curso de Técnico em Informática
Tech stack
Software and tools used professionally
Availability
Location
BrazilAuthorized to work in
Salary expectations
Social media
Interested in hiring Lucas?
You can contact Lucas and 90k+ other talented remote workers on Himalayas.
Message LucasGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
