Cesar Lauria

Coordinated the integration of security vision into business demands, combining cybersecurity and fraud prevention efforts within a single scope. - Lead Incident Response Team (CSIRT), Threat Intelligence (CTI), Threat Hunting, and Digital Forensics teams; - Defined strategies to reduce financial losses from security/fraud incidents; - Responsible for defining the brand's threat coverage and generating ROI through avoided losses calculations; - Planned and structured processes based on SOC-CMM and CIS Controls; - Implemented the SOCless initiative using Artificial Intelligence to automate repetitive tasks; - Supported and developed the team; - Provided technical leadership in security incidents.

Responsible for building and consolidating the Information Security strategy at SumUp Bank, focusing on regulatory security, vulnerability management, business continuity, and privacy. - Lead the creation and implementation of the bank’s information security environment, including processes, technology selection, and internal team integration; - Managed the offensive security program through Bug Bounty with a focus on vulnerability research and continuous asset hardening; - Acted in risk governance and business continuity, ensuring privacy and security in company products and processes; - Served as institutional contact with the Central Bank, especially on Open Finance structuring and compliance with Bacen Resolution No. 4.658.

Strategic role in structuring the Information Security area, focusing on processes, technology, secure development, and compliance. - Built the Information Security area covering governance, tools, and processes; - Performed penetration tests and vulnerability assessments on web and mobile applications; - Defined and implemented Secure Development (DevSecOps) processes integrated into the systems' lifecycle; - Created security guidelines for squads and awareness programs; - Managed security environments and solutions in production; - Lead supplier assessments with the Legal department, focusing on privacy, security clauses, and business continuity.

Restructured the Information Security department, enhancing process maturity and integrating security with technology and business areas. - Lead restructuring and strategy definition for the Information Security area; - Conducted penetration tests on web applications, networks, and infrastructure; - Developed and implemented security policies, procedures, and guidelines, including squad-specific recommendations; - Delivered cybersecurity awareness programs; - Managed security tools: DLP, Antivirus, Proxy, Firewall, and Splunk; - Acted as a security advisor for technical teams and business units.

Strategic and technical role in offensive security, risk management, and regulatory compliance projects, including team leadership. - Conducted penetration tests on web and internal apps, infrastructure, networks, and social engineering scenarios; - Performed vulnerability analysis and supported cyber risk mitigation; - Worked with best practices and frameworks: ISO 27001, CIS Controls, NIST, and SANS; - Developed and reviewed security policies and guidelines; - Lead technical teams on LGPD-related projects; - Handled incident response with a focus on prevention and business continuity.

Worked on security operations and analysis focused on vulnerability identification, incident response, and policy support. - Conducted penetration tests on web applications, infrastructure, and networks; - Analyzed vulnerabilities and supported mitigation processes; - Managed Identity and Access Management (IAM); - Assisted in creating policies and security guidelines; - Investigated incidents and provided response support.

SOC analyst supporting clients in finance, manufacturing, and government sectors. - Monitored environments and responded to incidents - Analyzed cyberattacks and documented reports - Used market-leading security tools

Worked in a corporate security environment focused on tool operations and incident analysis. Main Responsibilities: - Managed antivirus, IPS/IDS, firewalls, and traffic analysis; - Produced incident reports and suggested environment improvements.