Frentzen Amaral

Security Engineer with 6+ years of experience conducting and performing offensive and application security activities. My work is focused on continuous process improvement and using a data-driven approach to achieve the best results.

Cyber Security Analyst / Brazilian Air Force, Brazil There my main duties were:

Conduct and perform penetration tests of web applications and networks in organizations of the Ministry of Defense and Public Administration of Brazil;

Perform Cyber Threat Intelligence to improve defensive systems against possible threats in the scenario in which the organization was;

Member of Computer Security Incident Response Team (CSIRT) in possible security incidents and data breaches;

Conduct training and mentoring to other members of teams on the most advanced topics related to offensive security.

Tech Lead Application and Offensive Security / Midway, Brazil. Here my main duties are:

Conduct and run penetration tests of web apps, mobile apps, cloud environments, and networks in our environment;

Conduct and run secure code reviews of our codebases (JAVA, Python, PHP, and JS) and help developers to understand the security flaws;

Validate third-party penetration tests in our environment and carry out the intermediation with our teams of developers and engineers;

Plan, conduct, and run adversary emulation tests (red team/purple team) in our environment based on common TTP and Threat Actors (MITRE ATT&CK) present in our threat landscape;

Perform Cyber Threat Intelligence to improve defensive systems against possible threats in the scenario in which the organization was;

Propose, review, and build new security mechanisms to improve the security of our DevOps culture and CI/CD process;

Spread the Security Culture among developer teams to be aware of the risks and impacts of security vulnerabilities and the importance of its fix.

Design, review and build the Authorization and Authentication mechanisms in our microservices and other systems of interest.

Bachelor's Degree in Computer Engineering