Leandro Gomes

I am an cybersecurity professional with over 17 years of experience in the IT field. I have a strong background in cybersecurity and infrastructure in highly critical business environments and systems. I have worked in cybersecurity for large companies such as IBM, TCS, and TRE-SP. My methodical and organized nature makes me well-suited for analytical work with a high degree of precision, discipline, and efficiency. In addition, my excellent communication skills, both verbal and written, facilitate teamwork and the preparation of concise reports, significantly contributing to the achievement of desired goals. Expertise: - Security Controls and Best Practices Frameworks: OWASP, NIST, CIS Controls, ISO-27001, PCI-DSS, and others. - Security Policy Development and Implementation: Business continuity planning, disaster recovery, security risk analysis, incident response plan, backup policy, encryption, and more. - Security Awareness Training for Employees: Educating employees on cybersecurity best practices. - Penetration Testing Techniques (Mitre Att&ck): Identifying and exploiting vulnerabilities in systems and networks. - Identity management with tools such as Active Directory, Office 365, Auth0, Okta, and Jumpcloud. - Password Vault: Securely storing and managing passwords. - Vulnerability Management (OpenVAS, OwaspZAP, Tenable, Nessus, etc.): Identifying and remediating vulnerabilities in systems and networks. - Penetration Testing (Kali Linux - nmap, burpsuit, metaexploit, netcat, sqlmap, etc.): Simulating real-world attacks to identify and remediate security weaknesses. - Privacy Controls (GDPR, LGPD, etc.): Complying with data privacy regulations. - Manage, Detection and Response Systems: Implementing and managing tools to monitor, detect, and respond to security threats. - Using a Security Information and Event Management (SIEM) solution to collect, analyze, and correlate security data. - DLP: Preventing data loss and theft. - EDR: Detecting and responding to endpoint threats. - Firewall and IPS/IDS Implementation and Administration: Protecting networks from unauthorized access and attacks. - Networking Knowledge (Routing and Switching Protocols): Understanding and configuring network protocols. - Virtualization (VMware and Hyper-V): Implementing and managing virtualized environments. - In-depth Knowledge of Linux and Windows Operating Systems: Configuring, managing, and troubleshooting Linux and Windows systems.