Samuel de Souza Almeida

Outras informações:
I have worked with Red Teaming exercises, adversary simulation, and penetration tests. I was responsible for testing android applications, actively performing binary instrumentation, code review, and countermeasures bypass. Besides that, I oversaw team activities, document techniques, and processes and was responsible for juniors.Main activities: Coding JavaScript hooks for libc and Java functions, patching Smali codes, and code reviews.Main tools: Frida, Objection, Burp, ADB, Android Studio, IntelliJInnovations: Adoption of Jira to document security tests which provided us the capability to deliver while testing (continuous delivery), this is an enabler to perform security tests in the pipeline.

Outras informações:
I have worked for the Incident Response and Threat Intelligence Services (IRIS) team in Latin America. I had a client-facing role, responsible for answering critical incidents and performing threat hunting, tabletop exercises, and adversary simulation.Main activities: Write based KQL queries to identify new actors on WDATP, and perform phishing campaigns with post-engagement to environment access.Main tools: Windows Defender Advanced Threat Protection, Microsoft 365 eDiscovery, CrowdStrike Falcon, Splunk, and QRadar Highlights: Identify, investigate, and contain a new version of a banker malware in Brazil, and a group that was abusing business email compromise (BEC).

Outras informações:
I was responsible for the vulnerability management program, reviewing security components, advising architects on their solutions, helping sysadmins and developers to fix vulnerabilities, and managers on their cybersecurity journey. Main activities: Enumeration and scanning hosts for vulnerabilities. Review of PCI requisites and their countermeasures in place.Main tools: Qualys VM, Rapid7 Nexpose, Nessus Tenable, Fortinet Firewall, and iptablesInnovation: CIS Controls matrix with commercial and open-source solutions which became a standard document for other clients in the same segment. I was responsible for the vulnerability management program, reviewing security components, advising architects on their solutions, helping sysadmins and developers to fix vulnerabilities, and managers on their cybersecurity journey. Main activities: Enumeration and scanning hosts for vulnerabilities. Review of PCI requisites and their countermeasures in place. Main tools: Qualys VM, Rapid7 Nexpose, Nessus Tenable, Fortinet Firewall, and iptables Innovation: CIS Controls matrix with commercial and opensource solutions which became a standard document for other clients in the same segment.

Outras informações:
Movile is a Brazilian company with operations in different business segments, Food, Education, and Logistics. I've organized phishing campaigns, prepared security cloud monitoring recipes, and reported security issues and bugs for the dev team. I was responsible for writing security guidelines and cybersecurity policies for Movile group.

Outras informações:
Atech is an Embraer company, it's one of the most important players in Air Traffic Flow Management Systems (ATFM) in the World. I managed critical environments, including firewalls and servers. In security, I was responsible for automating processes through scripts and making vulnerability and risk assessments in web applications and operations systems.