Looking for a job

Vitor Rodrigues

@vitorrodrigues

Cybersecurity professional at Convatec leading global vulnerability management and integrating Azure, AWS, and GitHub.

At Convatec, I lead the Global Vulnerability & Exposure Management Program and administer and optimize the Tenable.io platform. I integrate Azure, AWS, and GitHub environments into vulnerability management workflows, improving visibility into assets and security weaknesses.

I define scanning strategies across hybrid environments and apply risk-based prioritization to support remediation. I also maintain executive dashboards and exposure management reports for key stakeholders.

Previously, I conducted incident response and threat hunting at Layer8, using Splunk and GVM for detection and vulnerability assessments. At PwC Portugal, I applied NIST and ISO 27001 frameworks in client assessments and compliance audits.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Analyst - Vulnerability Management Team Lead

Current

Convatec

May 2023 - Present (3 years 5 months)

Lead the Global Vulnerability & Exposure Management Program, administering and optimizing the Tenable.io platform. Define exposure management and scanning strategies across hybrid environments, ensuring comprehensive visibility of assets, vulnerabilities, and security weaknesses.

Tenable Trend Micro Risk Prioritization Exposure Monitoring Azure AWS GitHub Incident Response Phishing Analysis Alert Triage Jira Splunk CMDB Active Directory

Senior Associate - Cybersecurity

PwC Portugal

Mar 2023 - May 2023 (2 months)

Applied NIST and ISO 27001 frameworks in client assessments and compliance audits. Supported cybersecurity documentation, governance processes, and risk management activities.

NIST ISO 27001 Risk Management Compliance Governance

Information Security Consultant - CSIRT

Layer8

Apr 2022 - Mar 2023 (11 months)

Conducted incident response and threat hunting in multi-tenant SOC environments. Performed vulnerability assessments using GVM, delivered actionable remediation reports, and administered SIEM (Splunk).

Incident Response Threat Hunting GVM Splunk SIEM Vulnerability Assessment SOC

Security Analyst - CERT Coordination

DoisBR / Volkswagen Autoeuropa (T-Systems Iberia)

Nov 2020 - Apr 2022 (1 year 5 months)

Coordinated vulnerability analysis and remediation across Volkswagen's Autoeuropa IT infrastructure. Improved CMDB accuracy and aligned vulnerability data with WSUS, Altiris, and IT asset inventories.

Vulnerability Management CMDB WSUS Altiris Incident Response SLA Auditing Governance Compliance