Vinicius Santos

• Co-founded and led cybersecurity strategy for Domus, a CRM platform designed for specialized business environments. • Designed secure cloud and application architectures, integrating network security, WAF protection and access control from early stages. • Defined security policies, risk management practices and incident response processes aligned with security-by-design principles. • Oversaw infrastructure protection, ensuring confidentiality, integrity and availability of customer data. • Acted as technical and security reference, bridging business needs with practical and scalable security solutions. • Played a key role in aligning security strategy with business goals, ensuring scalable and secure growth of the platform.

Acted as a Tier 3 (N3) escalation point for cybersecurity operations in large-scale enterprise and government environments, supporting critical infrastructures with high availability and strict security requirements. Implemented and supported FortiEDR across more than 5,000 endpoints, performing advanced threat investigation, containment and remediation. Designed and managed FortiManager environments supporting over 2000 FortiGate firewalls, including centralized policy management, configuration control, change management and firmware lifecycle. Implemented and supported FortiWeb in AWS using high-availability architectures with Auto Scaling and load balancing, protecting public-facing applications against OWASP Top 10 threats. Designed and operated FortiGate FGSP auto-scaling environments across AWS, Azure and OCI, supporting multi-cloud and dynamic workloads. Implemented and managed FortiClient EMS with Full Zero Trust Network Access (ZTNA), delivering secure access solutions for government and private sector organizations. Supported FortiNDR deployments in government networks, improving visibility, anomaly detection and advanced threat identification. Deployed and operated FortiAnalyzer environments integrating more than 2000 devices, performing log correlation, threat analysis, incident investigation and security reporting. Implemented and managed FortiAuthenticator environments supporting over 2,000 users, including SAML integration with Entra ID for federated authentication. Implemented and managed FortiPAM solutions, enforcing privileged access control with audited and least-privilege access. Collaborated with SOC, cloud and infrastructure teams to design secure architectures, improve detection capabilities and reduce operational risk.

Acted as a Tier 2 Security Analyst providing operational network and cybersecurity support for government and private sector environments, ensuring service continuity, security and compliance. Provided Tier 2 support for FortiGate firewall infrastructures, including policy validation, access rules, VPN connectivity, proxy policies and high-availability monitoring. Supported dynamic routing protocols such as BGP and OSPF, assisting with routing stability, troubleshooting and traffic optimization. Supported SD-WAN environments, assisting with link monitoring, performance analysis, policy validation and failover troubleshooting. Provided operational support for Zero Trust Network Access (ZTNA), assisting with access policies, endpoint connectivity and secure remote access issues. Performed support activities related to authentication and access control, including LDAP and RADIUS integrations, captive portal configurations and user access troubleshooting. Provided support for SSL and deep inspection policies, assisting with certificate validation, traffic decryption issues and secure inspection troubleshooting. Supported remediation actions for security incidents such as brute force attacks, DoS and DDoS attempts, including policy adjustments, rate limiting, IPS tuning and incident escalation when required. Supported network access control (NAC) environments within the Fortinet ecosystem, assisting with device authentication, access enforcement and endpoint posture validation. Monitored and analyzed security events using FortiAnalyzer, supporting incident investigation, threat analysis and escalation processes according to SOC procedures. Worked closely with Tier 3, SOC and infrastructure teams to resolve incidents, apply remediation actions and maintain secure operations in regulated environments.

Acted as a Security Analyst Junior III providing operational support for network and endpoint security environments in government and private sector organizations. Provided support for FortiGate firewall environments, assisting with policy validation, access rules, VPN connectivity troubleshooting and basic routing support under established procedures. Supported FortiClient EMS environments, assisting with endpoint security agent deployment, VPN and ZTNA connectivity issues, user access troubleshooting and client-side remediation actions. Assisted with authentication and access control configurations, including LDAP and RADIUS integrations, captive portal support and user access validation. Supported SD-WAN and basic routing operations, assisting with link monitoring, connectivity validation and failover testing under senior guidance. Assisted with monitoring and initial analysis of security events such as brute force attempts and anomalous traffic patterns, escalating incidents to Tier 2 or Tier 3 teams when required. Supported SSL inspection and certificate-related issues, assisting with validation and troubleshooting of encrypted traffic inspection. Worked closely with Tier 2 analysts and senior engineers, following defined playbooks and procedures to ensure incident resolution, service continuity and compliance with security requirements.

Acted as a Security Analyst Junior II providing first-level operational support for network and endpoint security environments in government and private sector organizations. Provided basic support for FortiGate firewall environments, assisting with rule validation, access troubleshooting, VPN connectivity issues and policy verification under established procedures. Supported FortiClient EMS operations, assisting with endpoint agent installation, connectivity troubleshooting, VPN access support and basic user remediation activities. Assisted with authentication-related tasks, including LDAP and RADIUS connectivity checks, captive portal access issues and user authentication validation. Monitored network and security events, performing initial analysis of alerts related to connectivity issues, authentication failures and basic security incidents, escalating cases to Tier 2 teams when required. Assisted with SD-WAN monitoring and link status validation, supporting connectivity checks and failover observation under senior supervision. Worked under close guidance of Tier 2 analysts, following defined playbooks, procedures and service-level agreements to ensure incident resolution and service continuity. Actively developed technical skills in network security and the Fortinet ecosystem through hands-on support and continuous learning.

Provided entry-level operational support for network security environments, focusing on basic FortiGate firewall administration and service request handling. Assisted with firewall rule creation, access releases and basic policy validation following predefined procedures and approval workflows. Handled user requests related to connectivity issues, access permissions and basic VPN support, escalating complex cases to Tier 2 teams. Performed basic troubleshooting of network connectivity and security policies under senior guidance. Followed operational playbooks, documentation and service-level agreements to ensure accurate and timely request resolution. Developed foundational knowledge of network security concepts and the Fortinet ecosystem through daily operational support.

· Administration of the file server using the Linux operating system; · Tickets CSLA, CSC (Shared Services Center); · Access Control and User Maintenance; · Development of Spreadsheets and Reports; · Systems and Applications Management – RUB, TpLinux (Unisys), Lotus Notes, Norton Symantec, Office, G-Suite, NetBackup, Triângulus, NFE-e/NFE-c; · Software installation and update; · Installation and Maintenance of Local Network; · Linux language – Shell-Script; · Maintenance and prevention of computer equipment; · ITIL methodology; · Commercial and POS system opening and closing routine: · Server Backup Routine; · User support; · Remote Support for ERP Systems; · Training new employees and store users;

Serviços como Manutenção de Hardware, instalação de sistemas, formatação. Gestão de Backups com Shell Script. Banco de Dados MySQL.