Information
I run penetration tests, build detection and teach developers to ship safer code.
Work
2022 – now
Corvalis Bank — Lead Security Engineer
Lisbon
Built the in-house penetration testing programme and a detection pipeline for cloud workloads.
- Mean time to detect down from 3 days to 4 hours.
2019 – 2022
Northgate Security — Penetration Tester
Led web, API and cloud assessments for fintech and health clients, from scoping to retest.
2017 – 2019
Telvia — SOC Analyst
Triage, investigation and playbooks for a 24/7 security operations centre.
Skills
- Offensive
- Web and API penetration testing / Cloud configuration review / Threat modelling
- Defensive
- Detection engineering / SIEM tuning / Incident response
- Governance
- ISO 27001 readiness / Secure development lifecycle
Background
- Education
- Atlantico Institute of Technology — MSc, Information Security, 2017
- Certifications
- GIAC Certified Incident Handler (GCIH) — GIAC, 2024
Certified Information Systems Security Professional (CISSP) — ISC2, 2021
Offensive Security Certified Professional — OffSec - Languages
- English fluent / Portuguese native