Wazuh SIEM
Deployment, telemetry engineering, rules, alert analysis and risk visibility.
CYBERSECURITY • AI SECURITY • TECHNOLOGY LEADERSHIP
AI-driven
Cyber Defense
I design defensive security operations that connect telemetry, automation and large language models to improve risk assessment, incident triage and decision-making.
✓Defensive, authorized and human-supervised security engineering.
LIVE SECURITY PIPELINEONLINE
SIEMWazuh / Sentinel
SOARn8n workflows
AILLM risk analysis
HIGH
Privileged identity anomaly
CorrelatedMED
Endpoint behavior deviation
EnrichedLOW
Configuration risk finding
Reviewed01 — FOCUS
Current focus
Security engineering at the intersection of SIEM, SOAR, cloud platforms and applied AI.Microsoft Sentinel
Cloud-native SIEM, analytics, investigation workflows and security operations.
Microsoft Security
Defender ecosystem, identity security and broader Microsoft security controls.
n8n Security Automation
Event orchestration, enrichment, routing, reporting and repeatable response workflows.
LLM Risk Analysis
Contextual evaluation, prioritization and structured summaries with human oversight.
Cloud & Infrastructure
Kubernetes, Linux, IAM, hardening, resilience, monitoring and secure architecture.
02 — ARCHITECTURE
AI-assisted security operations
A practical workflow currently used to transform security events into contextual, reviewable risk intelligence.Endpoints & Cloud
→Wazuh / Sentinel
↓
n8n orchestration
→LLM analysis
↓
Risk score
MITRE context
Response guidance
HUMAN REVIEW & AUTHORIZED DEFENSIVE ACTION
Operational outcomes
- Risk scoring and prioritization
- Alert enrichment and correlation
- Incident summaries for technical and executive audiences
- Suggested response actions with human validation
- MITRE ATT&CK context and investigation support
03 — PROJECTS
Applied security work
Technical initiatives centered on authorized environments, reviewable automation and human decision-making.CURRENT TECHNICAL DIRECTION
SIEM engineering
Telemetry onboarding, detection tuning and alert investigation across Wazuh and Microsoft Sentinel.
Defensive automation
Repeatable n8n workflows for enrichment, routing, reporting and analyst-reviewed response guidance.
LLM-assisted analysis
Structured risk assessment, incident summarization and MITRE ATT&CK context with human validation.
04 — EXPERIENCE
Leadership grounded in engineering
More than two decades across software architecture, research and development, cloud platforms, infrastructure and technology leadership. At Estratosfera, I lead technology and cybersecurity initiatives, including monitoring, automation, identity, resilience and secure modernization.Selected career path
Estratosfera
Director of Technology & Cybersecurity
Turbi
CTO
Justto
CTO
Navita
Technical Lead & Architect
TOTVS
Research & Development Engineer
Enterprise technology
Architecture and senior software engineering roles
05 — CREDENTIALS
Credentials & education
Public, independently verifiable credentials are linked below.OCI 2025 Certified Generative AI Professional
Oracle • Valid through Nov 2027
OCI 2025 Certified AI Foundations Associate
Oracle • Valid through Sep 2027
AWS Certified Solutions Architect – Associate
Previously earned • Credential expired
MBA / CEAG
Fundação Getulio Vargas • 2014
Postgraduate in Software Engineering
ITA • 2008
B.Sc. Computer Science
PUC-SP • 2004
06 — CONTACT