Contact- (Home)-
www.linkedin.com/in/
thiagoascunha (LinkedIn)
Top Skills
Vulnerability Management
Payment Card Industry Data
Security Standard (PCI DSS)
EDR
Thiago Cunha
Senior Cyber Security Analyst | M365 Security | Azure Cloud
Security | AWS Security | Blue Team | EDR | XDR | EPP | ZTNA |
SASE | SIEM | VPN | SOC2 | PCI | Fortinet | Checkpoint | Cisco |
Hardening | SAST | DAST
Brasília, Federal District, Brazil
Summary
Cyber Security professional with strong background in conventional
LAN and WAN networks, security appliances and Cloud
infrastructures. Strong/fluent English.
Languages
Inglês (Native or Bilingual)
Português (Native or Bilingual)
Experience
Certifications
Softjourn, Inc
Senior Cyber Security Analyst
CCNP - Routing & Switching
CCNA - Security
CCNA - Routing & Switching
Introdução à Programação Interativa
em Python
February 2023 - Present (2 years 5 months)
International
@Pex-Card project
Responsable for analyzing and implementing security controls and best
practices:
- Azure Cloud Security.
- AWS Cloud Security.
- EDR and EPP - Crowdstrike Falcon, Microsoft Defender, Eset Protect.
- PCI, SOC2, GDPR and CCPA attestion process.
- Vulnerability management - Qualys, Crowdstrike Cloud security, ScoutSuite,
Enterprise Recon.
- Firewall configuration and management - ACLs, Routing, IPS/IDS, DLP, VPN.
- F5 Big IP LTM.
- Azure, AWS and F5 WAF.
- Security incident response.
- Endpoint and infrastructure hardening.
- NetSkope SASE and SDWAN.
- Sumo Siem.
- AppSec - Mend and Crowdstrike Cloud Security.
- Terraform.
ClearSale
Page 1 of 4
Cyber Security Specialist
November 2021 - February 2023 (1 year 4 months)
International
Responsable for analyzing and implementing security best practices on:
- Cyber Security Tech Lead.
- M365 Security.
- M365 Compliance.
- Microsoft Defender for Endpoint.
- Microsoft Defender for Identity.
- Microsoft Defender for Cloud.
- Microsoft Endpoint Managnment (Intune).
- Cloud Access Security Broker (CASB).
- Microsoft Sentinel.
- Azure Cloud Security.
- PCI, SOC2 compliance.
Sicoob Confederação
Information Security Analyst
June 2017 - October 2021 (4 years 5 months)
Brasília e Região, Brasil
Responsible for:
- Cyber Security Tech Lead in new projects.
- Implementing security hardening on environments hosted on AWS.
- Troubleshooting networks with security appliances.
- Fortinet firewall administration (311B, 3040B, 500E, 300E, 80E, 60E).
- Liberman Rapid Enterprise Defense administration.
- Cisco Proxy S300V and S600V administration.
- Symantec End Point Protection administration.
- Investigate security events via QRadar SIEM.
- Coordinate and conduct remote contingency plans on security and network
appliances.
- Plan infrastructure changes.
- Prospect security best practices.
- Prospect new security trends and solutions.
- Conduct POC – Proof of Concept with new solutions.
- Office365 - Security and Compliance.
- Configure and maintain SD-WAN networks.
- Configure and maintain micro segmentation with VMware NSX-T.
Page 2 of 4
Algar Tech
Senior Network Analyst
January 2016 - June 2017 (1 year 6 months)
Brasília e Região, Brasil
Responsible for:
- Datacenter, Campus and WAN networks Tech Lead.
- All the LAN, WAN and MAN infrastructure of the Brazilian Federal Police.
- Configure and maintain Cisco routers series 18xx, 19xx, 28xx, 34xx, 37xx,
38xx, 72xx, ASR1001.
- Configure and maintain Cisco switches series 35xx, 45xx e 65xx.
- Configure and maintain HP switches series A5120;
- Configure and maintain DELL Powerconnect 6224.
- Configure and maintain firewalls Cisco FWSM e ASA, Checkpoint.
- Configure and maintain Websense.
- Configure and maintain Cisco ACE load balancer.
- Plan infrastructure changes related to security and datacenter networks.
- Maintain networks with a variety of protocols MPLS, VSAT, 3G, Frame Relay,
PPP, MGRE, DSL, HSRP, GLBP, VRRP, ACL, NAT, BGP, OSPF, VLAN, QoS,
Trunk, Spanning Tree, SNMP, Net Flow, IPSLA, Tacacs, PAgP, LACP and
others.
- Troubleshoot security and network appliances.
- Document network design and configuration.
Sicoob Confederação
WAN and LAN network consultant
April 2012 - January 2016 (3 years 10 months)
Brasília
Responsible for:
- All the LAN, WAN and MAN infrastructure.
- Configure and maintain Cisco routers series 18xx, 19xx, 28xx, 34xx, 37xx,
38xx, 72xx.
- Configure and maintain Cisco switches series 35xx, 45xx e 65xx.
- Plan infrastructure changes related datacenter and WAN networks.
- Maintain networks with a variety of protocols MPLS, VSAT, 3G, Frame
Relay, PPP, MGRE, DSL, HSRP, ACL, NAT, BGP, OSPF, VLAN, QoS, Trunk,
Spanning Tree, SNMP, Net Flow, IPSLA, Tacacs, LACP and others.
- Troubleshoot network appliances and networking faults.
- Document network design and configuration.
Page 3 of 4
Education
ESAB
Professional MBA , Computer Networks · (2015 - 2017)
Universidade Católica de Brasília
Degree, Computer Netowrks · (2009 - 2012)
Canberra Institute of Technology
Degree, Systems Adminsitration · (2001 - 2004)
Page 4 of 4
