Diego Souza

Tech Lead responsible for quality of delivery, coordination and development of the team and employee (PDI), performance management, KPI monitoring, team performance strategies aligned to the deliverables of the product team and available in the master plan. Collaborating in the restructuring of the Red Team (Offensive Security) in one of the largest e-commerce companies in Latin America (Americanas, Submarino, Shoptime). Helping strategically the security posture of the market segment leader, which operates through a digital platform. Acting in constant simulation of real opponents using advanced offensive security techniques.

.

- Application/Management of Controls based on the best practices of the ISO 27,000 set of standards - Automated and manual testing of vulnerability analysis. - Threat Modeling in web applications. - Implementation and monitoring of security baselines. - Security Incident Response - Vulnerability Analysis and Management - Preparation of Technical and Executive Reports - Evaluation of policies, norms and procedures in the information security area - Elaboration of research and articles in the technical area of information security - Perform manual tests in invasion test and code analysis - Participation in Risk Management projects

Implementation of Unified Threat Management (UTM) WatchGuard, Firewall, IPS/ IDS, Anti Spam, Network Anti-Virus, Content Filtering, VPN. -Mcafee ePolicy Orchestrator 4.6 migration -ZABBIX implementation (Network Asset Monitoring) -Monitoring and analysis of suspicious events -Incident handling - Monitoring and management of WatchGuard UTM Services - Firewall, IPS/ IDS, Antispam, Network Anti-Virus, VPN - Management, Deployment and Troubleshooting; - VMware vSphere Management

-Security of Systems and Corporate Networks (PETROBRAS); -Intrusion Prevention and Detection Systems; -Vulnerability Analysis; Incident Response; -Monitoring and analysis of suspicious events; Identification of vulnerabilities in desktops and servers; Interface with several IT offices spread throughout Brazil and International Area; -Server administration and standardization; Vulnerability analysis (InternetScanner ISS and Enterprise Scanner - ISS), event analysis (ISS Site Protector), configuration of firewall rules (ISS Site Protector). - IBM ISS - Intrusion Prevention System - IPS Proventia GX; - IBM ISS - Network Sensor, Server Sensor, Internet Scanner, Server Protection for Windows; - IBM ISS - SiteProtector; - Management, Implementation and Troubleshooting; - Analysis and treatment of security incidents based on IPS and HIPS solutions - Installation, configuration and support of network IPS, Host IPS. -Reporting with SQL database server queries.

• Administration of Mcafee Total Protection; • Administration of Untangle Proxy with content control; • Supervision, administration and maintenance of the corporate network; • Implementation of maintenance and backup routines; • Diagnosis and troubleshooting of desktops; • Monitoring of performance of equipment; • Implementation of the PrintSpy System • Implementation and administration of OCS + GLPI Systems (called control and inventory); • Support and Back Office ERP installation (COMPANY) • It management • Preparation and budget control of Computers. • Continuous Research of new technologies.

• Implementation and administration of Mcafee Total Protection; • Implementation and administration of the SIAG (Management System); • Supervision, administration and maintenance of the corporate network; • Develop network design aimed at the adequacy of infrastructure.; • Support for internal systems, remote and local service users; • Responsible for the reports and called, • Implementation of maintenance and backup routines; • Diagnosis and troubleshooting desktop;

Support for internal systems, remote assistance to users of the TRT-RJ.Monitoring and reporting of the so-called and systems.

(Business Solution Technology) • Administration of Windows 2003 Server (Active Directory), called control tracking, academic and corporate support to users, • ISA Server Management, implementation of the academic system images (Ghost Server).Video settings and IP/MPLS.(Ibmec Center).

• Auditing the workstations, tender documentation, reports on servers and workstations, service reports, monitoring in the control called, • Structured cabling, the Windows 2003 Server Administration, creation of group and users, permissions, • Customer service, customer service corporate sectors (Presidency, directors), Dat tape backup, configuration of disparate networks, monitoring implementation of domain trees.

Leadership and Team Formation - New times, new organizations, new leaders; - The evolution of the concept of Management and Leadership; - The Mark and the Code of leadership; - Characteristics and competences of the Leader; - Techniques to lead - Situational Leadership; - Positive Leadership; - Mobilizing People - High Performance Teams; - Leading the process of Organizational Change. Emotional Competence - The importance of self-knowledge; - Understanding the origin of stress; - Managing resilience; - Neurolinguistic Programming; - Valuing Self-Esteem; - Emotional Intelligence; - Balancing emotions; - Helping Orders.

Neuroscience and Human Behavior - - Fundamentals of functional neuroanatomy; - Fundamentals of Neurophysiology; - Neurophysiology of behavior; - Neurophysiology of emotions; - Neuroscience of Cognition. Positive Psychology - Knowing Positive Psychology - PERMA Method; - Happiness and Positive Emotions - Well-Being Theory; - Positive Human Qualities; - Positive Organizations; - Applied Positive Psychology; - Acceptance and Commitment Therapy (ACT).

Leadership, People Management and Soft-skills Cloud-computing Security Communication Strategies and Crisis Management Training, Education and Awareness for Cybersecurity IoT Security Data Protection, Privacy and Regulations Corporate Governance Applied to Security Incident Response Centers Digital Law and E-Crime Data Protection Practices and DPO Roles Agile Culture, Security Development and Automation Cybersecurity Project Management Cybersecurity Technologies Security Testing and Concepts Digital Identity Security and Management Biometrics and Security Applications Cybersecurity Policies and Strategic Planning Principles of Fraud and Cybercrime Prevention Infrastructure for Cyber Defense Cybersecurity Resiliency Threats, Attacks & Vulnerability Management Internet Monitoring and Cybersecurity Intelligence

MBA in Project and Process Management with 8 Certifications - IT Governance and COBIT certification - Process Management and BPMN OCEB certification - Project Management and CAPM certification - Project Management and PMP certification - Service Management and ITIL certification - Service management and ISO20,000 certification - Project Management Office (PMO) implementation - Implementation of COBIT best practices - Deployment of ITIL best practices - Deployment of software project methodology - Implementation of information security policy - Research methodology - Monograph orientation - Strategic planning and BSC - Software design and SCRUM MASTER certification - Information Security and ISO 27.002 certification - Workshops with real cases of projects and processes

- Computer Network Security - Fundamentals of operating systems - Security in Windows environments - Security in Linux environments - Special topics in security. In the infrastructure layer - Application security - Vulnerability analysis - Cryptography - Access control systems - Special Topics in Application Layer Security - Special topics in security management - Security practices and models - Business continuity planning and disaster recovery - Computer forensic auditing - Security models and architectures - Research methodology - Coursework

• Final design Development, • Security Project seminar on computer networks, Linux environments and Windows 2003/2008 Server, •/Internet Intranet environment, network infrastructure projects, • audit and analysis of information security, Quality of service, Wireless Networks, voip technology