At Under Protection, I triage and investigate security alerts across identity, endpoint, network, firewall, and cloud logs. I prepare evidence-based assessments, support containment, and identify detection-tuning opportunities to improve alert prioritization.
At Tempest Security Intelligence, I monitored SOC/CSIRT alerts in Splunk, investigated incidents, and used CrowdStrike Falcon for endpoint triage. At University of Pernambuco (UPE), I developed lab environments for web and network attack scenarios and analyzed vulnerabilities using Burp Suite, Metasploit, and Wireshark.
