AppSec Leader & Specialist - Oakmont Group (DevSecOps Pipeline for Education and Publishing Applications)
Duration: February 2026 to August 2026
Summary:
- Led the technical development and governance of a DevSecOps pipeline supporting over 50 critical applications in the education and publishing sectors
- The project focused on embedding secure architecture into the Software Development Life Cycle (SSDLC) and automating security controls within CI/CD pipelines to enhance application security posture
Responsibilities:
- Technical leadership of DevSecOps pipeline and secure architecture definition.
- Implementation and governance of security tools including SAST, DAST, SCA, and container security.
- Automation of security controls using Azure DevOps, Jenkins, and custom scripting.
- Collaboration with development, QA, and operations teams to promote Secure by Design and Shift Left Security practices.
- Vulnerability management with risk-based prioritization and remediation tracking.
- Execution of DevSecOps maturity assessments aligned with OWASP SAMM and NIST frameworks.
- Support for regulatory compliance and security audits.
- Developer enablement and training initiatives.
- Continuous monitoring and improvement of application security posture.
- Advancing organizational security culture through awareness and technical enablement.
Technologies: SAST, DAST, SCA, container security, Azure DevOps, Jenkins, custom scripting, CI/CD pipelines, OWASP SAMM, NIST
System Engineer Lead - Capzul América Latina Ltda. (Pre-Sales Engineering and PoC Development)
Duration: February 2025 to October 2025
Summary:
- Led pre-sales engineering initiatives including preparation of proof of concepts (PoCs) and technical demos for enterprise clients across multiple sectors
- The project aimed to demonstrate security automation and third-party service integrations to improve threat detection efficiency and accelerate customer time-to-value
Responsibilities:
- Led pre-sales engineering efforts and PoC environment design and execution.
- Showcased integration of security automation and third-party services.
- Collaborated with sales and customer success teams to improve threat detection efficiency.
- Delivered partner webinars and presented solutions to C-level stakeholders.
- Built reusable demo narratives, PoC templates, and technical talk tracks for scalable pre-sales execution.
Technologies: OpenVPN, Postman, SoapUI, Cypress, Selenium, SIEM integrations
Application Security Manager - Facilmova (Application Security Lifecycle Management for High-Impact Clients)
Duration: August 2024 to February 2025
Summary:
- Managed the application security lifecycle for high-impact clients including Brazilian Electoral Courts (TREs) and MTI-MT
- The project focused on designing security strategies to protect systems and applications against emerging threats and translating security requirements into actionable controls and solution architectures
Responsibilities:
- Managed application security lifecycle for critical clients.
- Designed security strategies to mitigate emerging threats.
- Collaborated with client stakeholders to translate security requirements into controls and architectures.
Senior Security Solution Architect / Security Service Delivery Manager / Technical Senior Manager - Rimini Street (Advanced Database and Middleware Security Solutions and Global Managed Services)
Duration: November 2021 to July 2024
Summary:
- Designed and presented proof of concepts for advanced database and middleware security solutions including McAfee/Trellix ADS and Waratek AAMS
- Managed global security service delivery and led Rimini Protect technical management
- Engaged with C-level executives and supported global pre-sales and partner training activities
Responsibilities:
- Designed and presented PoCs for database and middleware security solutions.
- Engaged with C-level executives to align solutions with compliance frameworks.
- Reduced incident response times by 40% through proactive monitoring and automation.
- Supported global pre-sales activities and led partner training sessions.
Technologies: McAfee/Trellix ADS, Waratek AAMS
Cloud Solutions Architect - Capgemini (Cloud-Based Security Architecture Design and Solution Demos)
Duration: 2021
Summary:
- Designed cloud-based security architectures and orchestrated solution demonstrations to accelerate customer adoption
- Achieved Capgemini Aspiring Architect Certification, focusing on bridging complex business problems with secure cloud solutions
Responsibilities:
- Designed secure cloud architectures.
- Orchestrated solution demos to support customer adoption.
- Obtained Capgemini Aspiring Architect Certification.
Information Security Specialist & Cloud Architecture Senior - Grupo Marista (Cloud Security Enablement and Azure-Based Integrations)
Duration: 2020
Summary:
- Led cloud security enablement projects including Azure-based integrations, cloud monitoring, and proof of concepts for new security controls
- Delivered stakeholder workshops and promoted best practices for cloud-native security
Responsibilities:
- Led cloud security enablement projects and Azure integrations.
- Conducted cloud monitoring and PoCs for security controls.
- Delivered workshops and evangelized cloud-native security best practices.
Technologies: Azure
Senior Manager - EY (Security Risk Assessments and Compliance-Driven Security Architectures)
Duration: 2019
Summary:
- Directed security risk assessments and designed compliance-driven security architectures for enterprise clients
- Provided executive advisory services for LGPD/GDPR readiness and data protection strategies
Responsibilities:
- Directed security risk assessments.
- Designed compliance-driven security architectures.
- Supported executive advisory for LGPD/GDPR readiness and data protection.
Project Manager and Delivery - Ericsson (Project Management and Delivery)
Duration: 2019
Solution Architect Senior - FCamara (Solution Architecture)
Duration: 2018 to 2019
Enterprise Solution Architect Senior - ASG Technologies do Brasil (Enterprise Solution Architecture)
Duration: 2017 to 2018
Pre-sales System Engineer LATAM - Checkmarx (Pre-sales Engineering)
Duration: 2016 to 2017
Pre-Sales/Sales Engineer - Hewlett – Packard do Brasil (Pre-Sales and Sales Engineering)
Duration: 2011 to 2015
Consultant Senior - Banco Santander (Consulting)
Duration: 2009 to 2010
Upstaffer since September, 2026
