Security in the age of AI: protecting data from intelligent threats and leaks
Conecta TI 2026 · Natercoop
Shadow AI, prompt injection, deepfake fraud and the wider attack surface, followed by governance, usage rules and a 90-day plan.
About eleven years in security
From consultant to CTO.
The path ran from a game studio into security consulting, then operations leadership, and on to agentic AI in production. About eleven years of that work has been security.
Selected talks & presentations ↓I started in a game studio, shipping multiplatform games and apps in C# and Unity. Security consulting came next: enterprise integration of firewalls, endpoint protection and application delivery, then discovery, proofs of concept and hands-on rollouts of SIEM, vulnerability assessment, multi-factor authentication and encryption.
I led offensive work (penetration tests, security assessments and social engineering) and the pre-sales conversations that turned a business need into a scope. A postgraduate degree in cyber threat intelligence sits in that chapter. Later I led security operations for a 24/7 SOC and MDR practice, structuring Blue Team and Red Team work and long-term managed services. I have been in major incident war rooms in Brazil and abroad.
As CTO and lead AI engineer I am the technical counterpart to CIOs, CISOs and executive teams in financial services, healthcare, cooperatives and industry. Three AI products are in production on the OpenAI API. The architecture covers models, retrieval, integration, evaluation, guardrails and deployment, including when a high-impact action stays with a person.
I am pursuing a postgraduate degree in applied AI engineering. English is fluent for professional work; Portuguese is my native language. What I care about most is the team: clear ownership, and engineers who can lead the next chapter.
English, fluent for professional communication. Portuguese, native.
Practice
- Agentic AI
- OpenAI API, tool calling, structured outputs, retrieval-augmented generation, evaluations, LangChain and LangGraph, guardrails.
- Architecture
- Python, APIs, Kubernetes, Azure, AWS and GCP, CI/CD, and monitoring of AI services.
- Security and governance
- Prompt-injection defense, least-privilege tool access, per-customer data isolation, LGPD, ISO/IEC 27001 and 27701, NIST CSF, incident response.
Education
- Applied AI Engineering, postgraduateIn progress · Coders University · from October 2026
- Cyber Threat Intelligence, postgraduateInstituto DARYUS · 2022
- Game Development and Design, technology degreeFAESA · 2012–2014
Certifications
- CompTIA CySA+ (2023)
- CompTIA Security+ (2017)
- Check Point Certified Security Expert, CCSE R80 (2018)
- F5 Certified Administrator, BIG-IP (2018)
- Rapid7 InsightIDR Certified Specialist (2020)
- Fortinet NSE 3 (2026)
- Anthropic, Claude Code in Action (2026)
- Fortinet Certified Associate and Fundamentals Cybersecurity
- Microsoft Certified: Azure Fundamentals
Check Point DemoPoint Rising Star, 2022.
The builder’s journey
One chapter opens the next.
Explore the work that shaped how I build, investigate, and lead.
Chapter06 / 06 · AI & product
01Software development
Chapter 01 / 06
Software development
Turning ideas into working systems
2014–2015
Software development was my starting point. I began at a game studio, shipping multiplatform games and apps in C# and Unity, from prototype to a published build.
02Infrastructure consulting
Chapter 02 / 06
Infrastructure consulting
Seeing the systems around the code
2015–2019
I moved into security integration consulting: planning and deploying next-generation firewalls, endpoint security and application delivery with vendor teams. The work expanded my view from software to the networks and environments it depends on.
03Blue Team & incident response
Chapter 03 / 06
Blue Team & incident response
Learning from the defender’s side
Cybersecurity became my next chapter through Blue Team incident response: understanding what happened and helping teams respond.
04Offensive security & CTI
Chapter 04 / 06
Offensive security & CTI
Understanding the other side
I went deeper into offensive security, with a postgraduate degree in Cyber Threat Intelligence along the way. The work included penetration tests, security assessments and social engineering, from scoping to remediation guidance, and pre-sales that turned a business need into a technical scope.
05Operations & team leadership
Chapter 05 / 06
Operations & team leadership
Building the capability, and the people
2022–2023
I led security operations strategy for a 24/7 SOC and MDR practice, structured Blue Team and Red Team operations, and took managed services from design to launch. SOC and VOC work sat inside long-term engagements. Major incident war rooms in Brazil and abroad reinforced the value of strong teams and future leaders.
06AI & product
Chapter 06 / 06
AI & product
Back to building, with operational experience
2023–present
Applying AI to security, connecting operational experience with products and the teams behind them. I led conception, contributed code and architecture, and led the development team for an agentic SOC platform, a vulnerability-operations copilot and an external attack-surface agent.
CTO and applied AI architect. Postgraduate degree in Cyber Threat Intelligence. Postgraduate study in Applied AI Engineering in progress.
Talks & panels
Saying it out loud, in rooms that push back.
Conferences, workshops and executive rooms, in Brazil. Titles in English are editorial translations.
Deep and dark web: when data becomes currency
Bandes
An awareness talk on the market for exposed credentials and everyday practices that help protect corporate information and access.
Safe use of tools and protection of sensitive information
Bandes
What an attacker finds after a single click, and the everyday habits that limit the damage: information classification, LGPD duties, ransomware and the safe use of tools, including generative AI.
Automating SAST & DAST with AI: how far can we go without a human in the loop?
TIES / Data Saturday 2026 · UniSales
A practical approach to AI-assisted SAST and DAST, combining reproducible evidence, risk prioritization, and human validation.
Protecting business in the era of autonomous AI
Amcham Espírito Santo
The new era of the SOC: surviving AI-powered attacks
BSides Vitória 2026 · FAESA · Vitória, Brazil
Presenting ISA Cyber at its official launch
ISA Cyber Official Launch · Base27 · Vitória, Brazil
Strategies for the new attack surface
I Workshop de Tecnologias de Redes do PoP-ES · UFES · Vitória, Brazil
Recording links will be added only after verification.
BEYOND THE WORK
A few personal favorites.
Ragnarok Online is my favorite game, and I’ve liked Pokémon since childhood. My favorite anime are Neon Genesis Evangelion and Bleach, and I also like Cowboy Bebop. My favorite film saga is The Lord of the Rings, and I also really like The Hobbit.
Asian culture, especially Japan, interests me. I hope to visit Okinawa one day. I also dream of having a Shiba Inu.
I enjoy airsoft and scuba diving. At home I keep a marine aquarium with exotic fish and an anemone.
I also develop games with AI as a hobby. None are finished or published yet; I plan to share progress here through devlogs. Future devlogs →
- Games, anime & cinema
- Asian culture
- Airsoft & scuba diving
- Marine aquarium