Carolina Prado

As part of the Offensive Security team at Devoteam Cyber Trust, I work on identifying and exploiting vulnerabilities to help clients reduce risks and strengthen their security posture. Core Responsibilities • Identify and report security vulnerabilities in web applications and infrastructure • Perform penetration testing on web applications and network infrastructure • Analyze results from automated vulnerability scanning tools Complementary Skills in Progress • Perform penetration tests on mobile applications, internal networks and Wi-Fi • Develop custom tools in Python, Go and Bash to support exploitation processes • Conduct Open Source Intelligence (OSINT) investigations • Reverse engineer mobile applications to bypass security mechanisms • Review source code to identify insecure functions, methods or bad practices These complementary skills are being developed progressively as I master core responsibilities and in alignment with project demands.

Worked as a digital marketing specialist and UGC content creator, planning and executing paid campaigns and organic marketing strategies. • Content creation and storytelling for multiple brands. • Optimization of paid campaigns (Google Ads, Meta Ads) through metric analysis and ROI tracking. • Affiliate management and conversion funnel creation for e-commerce. • Data privacy compliance (GDPR) applied to digital marketing campaigns. • Collaboration with growth and performance teams to develop retention and engagement strategies.

E-commerce business operating under a dropshipping model, focused on offering a variety of curated products to an international customer base. • Managed supplier relationships, product selection, and inventory optimization • Developed digital marketing strategies, including paid ads and organic growth • Ensured secure transactions and compliance with online payment regulations • Analyzed market trends to enhance product offerings and conversion rates

As an Order Support Specialist, I managed ticket resolution, issue investigation, and escalation of critical incidents. I worked in different sectors, including logistics, mobility, and reservations, ensuring compliance with internal policies and data protection regulations. • Experience with CRM, SAP ERP, and internal systems for data analysis and technical issue resolution. • Handling sensitive transactions, fraud prevention, and ensuring GDPR compliance. • Decision-making based on protocols to resolve complex cases, including contract disputes and digital asset recovery. • Risk analysis and mitigation in critical cases involving clients and suppliers. • Bilingual communication (English & Portuguese) via chat, email, and phone.

Breakfast box delivery business specializing in customized gourmet experiences for personal and corporate clients. • Oversaw end-to-end operations, from order management to fulfillment • Designed and marketed customized gift sets, enhancing customer engagement • Implemented customer loyalty programs to increase retention • Managed secure payment processing and logistics coordination

Specialized in maternal and infant nutrition, providing personalized consulting for parents and caregivers. • Guided families through the introduction of solid foods, focusing on nutritional balance, food safety, and allergy prevention. • Developed and delivered online courses, e-books, and educational content on infant nutrition and healthy eating habits. • Conducted workshops and private consultations to assist parents in meal planning, food refusal management, and balanced nutrition. • Created engaging content for social media and digital platforms, building an educational community around maternal and child nutrition. • Ensured compliance with GDPR and food safety regulations in all educational materials and consulting services.

Operated within a high-demand transportation network, ensuring compliance with safety protocols, risk assessment, and regulatory standards. • Real-time risk assessment and situational awareness to ensure passenger safety. • Incident response and problem-solving to handle unexpected disruptions and customer issues. • Data security awareness, managing digital payment systems and customer-sensitive data. • Compliance with transportation regulations, ensuring alignment with industry policies and security standards.

Worked as a hospitality receptionist, overseeing reservations, guest services, and operational logistics to ensure a seamless customer experience. • Managed the reservation system, handling check-ins, check-outs, and direct customer support via digital and phone channels. • Supervised housekeeping operations, ensuring all rooms and common areas met cleanliness and quality standards. • Trained new employees on operational procedures, customer service best practices, and reservation management. • Coordinated with external vendors, including laundry services and supply providers, to maintain stock and service efficiency. • Prepared welcome breakfast baskets for new guests, enhancing customer satisfaction and experience. • Conducted inventory control and purchasing, ensuring cost efficiency and compliance with financial processes. • Problem-solving and escalation management, resolving guest concerns and operational challenges proactively. • Provided bilingual service (English & Portuguese) for international guests.

Responsible for customer service and operational support in a food service environment. • Order management and direct customer service. • Inventory control and supply management to optimize operations. • Ensuring food safety and quality standards. • Handling payments and daily cash reconciliation.

Intensive 360+ hour program focused on cybersecurity. Key topics covered: • Network monitoring, traffic analysis, and system security. • Cybersecurity frameworks, vulnerabilities, encryption, firewalls, SIEM, and IDS/IPS. • Digital forensics, anti-forensics, and malware analysis. • Attack simulation, incident response, and risk management. • Threat intelligence and online anonymity. • Basic programming in Python and PowerShell. Skills developed: • Threat mitigation, malware analysis, and network security. • Hands-on experience with tools like Splunk and Kibana. • Implementation of secure practices and system hardening.