# samuel lima samuel lima is a remote worker on Himalayas, SOC Analyst at Under Protection, based in Brazil. Source: https://himalayas.app/@samuellima2 ```text SOC Analyst at Under Protection investigating security alerts and tuning detections across identity, endpoint, network, and cloud telemetry. ``` | Detail | Value | | --- | --- | | Availability | Open to opportunities | | Location | Brazil | | Authorized to work in | Brazil | | Job categories | SOC Analyst, CSIRT Analyst, Security Operations Analyst, Incident Response Analyst, Offensive Security Researcher | | Skills | Security Alert Triage, Incident Response, Security Investigations, Threat Hunting, Detection Engineering, Detection Rule Development, IOC Analysis, Log Analysis, MITRE ATT&CK, Endpoint Detection And Response, Network Traffic Analysis, Containment, False Positive Analysis, Vulnerability Analysis, Web Application Security Testing | ## About ```text At Under Protection, I triage and investigate security alerts across identity, endpoint, network, firewall, and cloud logs. I prepare evidence-based assessments, support containment, and identify detection-tuning opportunities to improve alert prioritization. At Tempest Security Intelligence, I monitored SOC/CSIRT alerts in Splunk, investigated incidents, and used CrowdStrike Falcon for endpoint triage. At University of Pernambuco (UPE), I developed lab environments for web and network attack scenarios and analyzed vulnerabilities using Burp Suite, Metasploit, and Wireshark. ``` ## Experience ### SOC Analyst (current) Under Protection. Jul 2026 - Present ```text Triage and investigate security alerts by correlating identity, endpoint, network, firewall, and cloud logs. Prepare technical assessments and perform containment actions. ``` Skills: StellarCyber, Google-SecOps, Splunk, SentinelOne, CrowdStrike-Falcon-Cloud-Security, Windows-Event-Logs, Sysmon, AuditD, Auditbeat, TCP-IP, DNS, HTTP-HTTPS, FortiGate, FortiAnalyzer, Cloudflare, AWS-CloudTrail, Microsoft-Entra-ID, Microsoft-365, Google-Workspace, Netskope, MITRE-ATT&CK, Threat-Hunting, Incident-Response ### SOC / CSIRT Analyst Tempest Security Intelligence. Mar 2023 - Jun 2026 ```text Monitored, analyzed, and triaged SOC/CSIRT security alerts using Splunk SIEM. Investigated security incidents and supported incident response, containment, and remediation activities. ``` Skills: Splunk, CrowdStrike-Falcon-Cloud-Security, MITRE-ATT&CK, Incident-Response, Log-Analysis, Event-Correlation, Detection-Engineering, SIEM-Rule-Tuning, Threat-Intelligence ### Offensive Security Researcher University of Pernambuco. Mar 2024 - Apr 2025 ```text Developed lab environments to simulate network and web-based attacks, including SQL injection, XSS, MITM, and Evil Twin scenarios. Performed vulnerability analysis and exploitation using Burp Suite, Metasploit, and Wireshark. ``` Skills: Burp-suite, Metasploit, Wireshark, SQL-Injection, XSS, MITM, Evil-Twin, OWASP-Top-10, TryHackMe, PortSwigger, CTF ### Development Intern IT Power Software. May 2022 - Jul 2022 ```text Supported software development through coding, debugging, and system logic improvements. Gained foundational experience with application workflows and system architecture. ``` Skills: Software-Development, Debugging, System-Architecture ## Education ### University of Pernambuco Bachelor of Computer Engineering, Computer Engineering ```text Bachelor of Computer Engineering degree from the University of Pernambuco. ``` ### TryHackMe SOC Level 2 Certificate, Security Operations ```text SOC Level 2 Certificate from TryHackMe. ``` ### Fortinet NSE 1 - Information Security Awareness, Information Security ```text NSE 1 - Information Security Awareness certification from Fortinet. ``` ### Fortinet NSE 2 - The Evolution of Cybersecurity, Cybersecurity ```text NSE 2 - The Evolution of Cybersecurity certification from Fortinet. ``` ### Fortinet NSE 3 - Fortinet Product Awareness, Fortinet Products ```text NSE 3 - Fortinet Product Awareness certification from Fortinet. ``` ## Tech stack - Splunk - Cloudflare - Python - Java - C - AWS CloudTrail - Wireshark - Linux - Windows - Kali Linux - Google Workspace - Sophos - FortiAnalyzer - Burp Suite - Nmap - Metasploit - SentinelOne - Netskope - Microsoft Entra ID - Microsoft 365 To contact samuel, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Caio Cardoso](https://himalayas.app/@caiocardoso): Principal Security Engineer, Dell Technologies - [Charleson Ribeiro](https://himalayas.app/@charlesonribeiro): Bug Hunter/Pentester, IPV7 - [João Pimentel](https://himalayas.app/@joopimentel): Information Security Analyst, Itaú Unibanco - [Harley Araujo](https://himalayas.app/@harleyaraujo): Incident Response Consultant, ServiceIT - [Cristhian Lucinger](https://himalayas.app/@cristhianlucinger): Researcher, P3 Model, Independent Researcher - [Rony User](https://himalayas.app/@ronyuser): Security Operations Center Analyst, Networfi Security - [Victor Ferreira](https://himalayas.app/@VictorJCFerreira): Pesquisador Bolsista, UPE / CNPq - [Pedro Henrique Lomba](https://himalayas.app/@pedrohenriquelomba): IT Intern, Microware - [Ygor Jianjulio Nassif](https://himalayas.app/@ygorjianjulionassif): Professor Adjunto, IP Control - [Henri Lopes](https://himalayas.app/@henrilopes): Estagiário de Cyber Security, It4us Cyber Security