Matheus Carneiro

Designed a cryptography organization-wide library to standardize encryption/decryption for sensitive customer PII data. Implemented a key identifier mechanism for secure, zero-downtime secret rotation and developed AI-driven penetration testing agents.

Architected and implemented a comprehensive S-SDLC framework. Developed Security MCPs for Claude Code, Codex, and Gemini, and engineered Claude Skills and Cursor Agents for security-centric code reviews.

Monitored threats using Splunk SIEM and MS Defender XDR. Deployed DRP, Axur CTI, and microsegmentation, and managed vulnerability scanning and patching.

Managed SAST, SCA, and Bug Bounty Programs (VDP/BPP). Oversaw the full vulnerability lifecycle including Red Team, QA, and Threat Intel, and developed internal tooling for vulnerability triage and modeling.

Led a security engineering team focusing on secure development. Owned and improved internal SAST, SCA, and IaC tooling, and built a Security Champions program.

Secured CI/CD pipelines using GitHub Actions, Azure DevOps, AKS, and OpenShift. Implemented RASP, mobile obfuscation, and IaC scanning, and monitored AppSec maturity with OWASP SAMM.

Implemented CI/CD security on GCP with ArgoCD and Kubernetes. Applied PrismaCloud CWPP and DefectDojo, and managed SCA/SAST/DAST integrations and cultural AppSec rollout.

Developed REST APIs in Java using Spring Boot. Maintained XHTML pages with JSF/Primefaces and supported Oracle and DB2 databases.

Developed inventory control systems using Java and JavaFX. Applied Clean Code, SOLID principles, Hibernate, and JPA, and delivered full-stack solutions with authentication and reporting features.

Automated documentation and military payroll tasks using Java and Bash. Managed LVM volumes and Linux file systems.

Bachelor's degree in Information Technology with a focus on Cyber Defense.