Carlos Malian

- Promoted to lead Security Operations, managing both the SOC and Cloud Security teams and guiding the strategic direction of security initiatives across the organization. - Established and operationalized the SOC’s Threat Intelligence and Incident Response programs, enhancing detection capabilities, response maturity, and cross-team coordination during security events. - Led the implementation and continuous improvement of security alerting, monitoring, and triage workflows, ensuring high visibility into threats and faster mean-time-to-detection (MTTD). - Designed and launched the Cloud Security team’s Vulnerability Management Program, enabling structured prioritization, remediation workflows, and risk reduction across cloud and containerized environments. - Built and maintained an enterprise-wide CSPM program, ensuring ongoing compliance with internal policies and regulatory (ISO 27001, GDPR, PCI) requirements while optimizing cloud posture across AWS environments. - Introduced and managed Kubernetes workload protection using SentinelOne, providing runtime security, behavioral detection, and enhanced protection for containerized workloads. - Drove adoption of Zero Trust initiatives, including ZTNA enhancements, secure access patterns, and continuous security posture evaluation across applications and infrastructure. - Empowered the team through process modernization, automation, and clear operational frameworks, resulting in measurable improvements in response efficiency, risk reduction, and security governance.

- Designed and maintained multi-account AWS security governance using AWS Organizations, Control Tower, SCPs, centralized logging, and cross-account monitoring strategies. - Managed and optimized the AWS infrastructure supporting Zscaler ZTNA (ZPA), ensuring resilient connectivity, secure access controls, and alignment with Zero Trust architecture principles. - Implemented, monitored, and enhanced security controls for AWS EKS clusters, integrating runtime visibility, compliance checks, and threat detection across Kubernetes workloads. - Delivered scalable AWS WAF protections for global applications, improving automated rule deployments, mitigating OWASP Top 10 threats, and reducing false positives. - Led continuous CSPM initiatives across AWS, integrating findings into remediation pipelines, compliance workflows, and executive reporting. - Migrate from Forcepoint CASB to Zscaler SaaS protection (ZIA) to strengthen SaaS visibility, internet encryption, and data protection across the organization. - Developed and deployed security automation projects using Python, Bash, and PowerShell to streamline operational tasks, enforce guardrails, and enhance incident response efficiency. - Planned and executed the insourcing of SOC operations, transitioning from outsourced services to an internally managed model—resulting in significant yearly cost savings and improved detection and response maturity. - Collaborated with engineering and platform teams to embed security into CI/CD workflows, implement least-privilege principles, and improve cloud infrastructure resilience. - Drove continuous improvement in threat monitoring, cloud governance, and operational processes through automation, documentation, and cross-functional enablement.

- Managed and optimized AWS security controls, including AWS WAF, AWS Firewall Manager, Security Groups, and network protection policies across multiple AWS accounts. - Performed continuous CSPM (Cloud Security Posture Management) using Prisma Cloud assessments across AWS, Azure, and GCP, ensuring compliance with organizational and industry security standards. - Identified and remediated cloud security gaps, implementing fixes related to misconfigurations, identity risks, exposed services, and workload vulnerabilities. - Administered and tuned Cloudflare and Akamai WAF policies to enhance application-layer protection, reduce false positives, and mitigate OWASP Top 10 threats. - Collaborated with infrastructure and development teams to design secure deployment patterns, improve incident response workflows, and enforce best practices for cloud governance. - Developed security reports and dashboards to track cloud posture, threat trends, and remediation progress for technical and leadership stakeholders.

- Led the design, deployment, and optimization of hybrid network architectures across on-premises datacenters and cloud environments (AWS and Azure). - Administered and maintained core IT infrastructure, including servers (Linux, Windows, SQL Server, MySQL Server), virtualization platforms (Hyper-V, VmWare) , storage, and enterprise network components. - Designed and implemented cloud networking solutions, including VPCs, VNets, Transit Gateways, VPNs, ExpressRoute, Direct Connect, routing policies, and segmentation strategies. - Deployed and managed firewall infrastructures on-premises and in the cloud (AWS WAF, Azure WAF, Azure Firewall, Checkpoint Cloudguard), ensuring secure traffic flows and compliance with security standards. - Built multi-tier cloud architectures leveraging load balancers (ALB, NLB, Azure Load Balancer, Application Gateway), private subnets, and NAT gateways. - Implemented and monitored infrastructure observability using CloudWatch, Azure Monitor, Zabbix, Grafana and SIEM tools to ensure high availability and performance. - Managed IAM, identity federation, and network security controls, applying least-privilege and Zero Trust principles. - Coordinated and supervised IT operations teams, providing technical leadership, mentoring, and support for critical infrastructure initiatives. - Collaborated with cross-functional teams to define networking standards, disaster recovery strategies, and cloud migration roadmaps. - Automated routine infrastructure tasks using Infrastructure-as-Code (Terraform/ARM/CloudFormation) and configuration management tools.

- Built, managed, and maintained the company's Azure cloud-based infrastructure. - Established and managed Azure ExpressRoute to ensure secure and reliable network connectivity. - Designed and implemented virtual networks, and Azure Front Door within Azure environments. - Implemented and managed Azure Firewall and Checkpoint CloudGuard firewall to protect cloud-based resources. - Built and managed AWS multi-account architecture for a new bussiness unity. - Azure Log Analytics to monitor the cloud environment and Zabbix to monitor the on-premises environment; - Support during PCI Certification for a Service Provider; - Thales HSM snmp monitoring; - Managed the MPLS interconnection between 3 datacenters and 3 remote offices. - Designed and managed the 3-tier datacenter network architecture, including a service provider PCI environment; - Managed the MPLS network connection to the credit card environment (Visa gateways, Mastercard gateways); - Juniper Router and Switch Administration (IPSec, BGP, ZBFW); - Cisco R&S Administration; - Aruba WiFi enterprise administration; - Checkpoint VSX Implementation;

- Worked as a self-employed registered Engineer (Brazilian Official Registration CREA-SP), developing network and telecommunications enterprise projects for service providers and corporations. - Worked as a consultant specializing in the interconnection of Public Switched Telephone Network (PSTN) operators. - Support during bid specifications.

- Worked on developing and implementing infrastructure cabling systems (copper and fiber); - Omnichannel Call Center and Contact Center projects (Cisco, Mitel, Avaya, Panasonic); - VoIP and analog TIE-LINE solutions for telephony systems; - Development of industrial-grade video surveillance systems; - Responsible for implementing Cisco data, voice, and video network solutions. - Wireless site survey and enterprise deployment; - Bid specifications support; - Troubleshooting VoIP, Router, and Switch issues at the protocol level; - Technical manager overseeing 10 telecommunications analysts.

- Monitored data center links and services, ensuring optimal performance and minimal downtime. - Supported international clients and partners by diagnosing and resolving hardware, software, and network connectivity issues promptly. - Performed routine maintenance, handled user access and application support, and documented incidents and service requests. - Communicated effectively in both English and Portuguese, enabling seamless assistance to stakeholders. - Escalated complex technical problems and maintained thorough operational records for continued service improvement.