Independent work
Applications, automation and cybersecurity
Development of security scripts and utilities. Assessments of APIs, authentication, authorization and web applications. Server hardening and integration of OWASP practices into development.
CYBERSECURITY / SÃO PAULO, BRAZIL
Lucas
Morato.
Security at every layer.
Security Operations, AppSec and Security Engineering. Development, automation and analytical thinking applied to protecting systems.
APPLICATIONS / IDENTITY / INFRASTRUCTURE
17+years in technology and digital projects
#1 BrazilHack The Box · peak national ranking
80+courses, certificates and credentials
PUCPRpostgraduate studies in Cybersecurity
HACK THE BOX / RECOGNITION
#1BRAZILPeak national ranking
Knowledge put to the test.
Hands-on practice in vulnerability exploitation, enumeration, Active Directory, privilege escalation and lateral movement in controlled environments.
Advanced HadesP.O.O.ZephyrDante Pro Labs
Technical portfolio01 / EXPERTISE
From code to operations.
A development background for investigating risk, strengthening applications and automating security workflows.
Monitoring, log analysis and threat investigation. Knowledge of SOC/SecOps, incident response and vulnerability management.
Web application and API assessments, code review, authentication and authorization. Security integrated into development and the software lifecycle.
Web pentesting, enumeration, infrastructure assessment and vulnerability validation. Hands-on lab practice with Active Directory and lateral movement.
Application and server hardening, access control and automation. Development experience applied to scripts, integrations and security workflows.
02 / LAB
Security, demonstrated.
An HTTP header analysis: from an exposed configuration to the implementation of protective controls.
HTTP / RESPONSE HEADERS
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: sample-app
Cache-Control: no-storeCONTROL ANALYSIS
Sample ready for analysis.
Analysis is limited to the controls in this sample. It does not represent a complete security audit.
LOCAL SAMPLES · NO EXTERNAL SCANS
HACK THE BOX / PRO LABS
Practice in advanced environments.
Completed Hack The Box labs in controlled environments.
01Advanced Hades
02P.O.O.
03Zephyr
04Dante Pro Labs
03 / EXPERIENCE
Engineering with context.
More than 17 years in technology, digital development, automation and complex projects. Today, practice and training focused on cybersecurity.
Selected technical contributions from the résumé.
Download résuméPoint Comunicação
Technology and operations contributions
Participation in endpoint and digital environment protection initiatives. Automations, scripts and integrations for operational processes. Multidisciplinary team leadership and complex project management.
Novine
Web development and application security
Founded and managed a digital company. Full stack development, code review and remediation of vulnerabilities including SQL Injection and XSS. Input validation and server and database hardening.
04 / EDUCATION
Knowledge in progress.
Academic training, continuous practice and more than 80 courses, certificates and credentials in Cybersecurity and Technology.
Postgraduate studies
Cybersecurity, Software Architecture & Data Science
PUCPR · 2021–2022
Bachelor’s degree in Web Development
Universidade Anhembi Morumbi · 2008–2012
Languages
Native Portuguese. Advanced English for reading and technical research; intermediate English for conversation and meetings.
CONTINUING EDUCATIONView credentials on LinkedIn
Cisco
SOC · Threat Investigation · Network Security
IBM
Incident Response · Forensics · Penetration Testing
Microsoft
Defender · IAM · Azure Security
Palo Alto Networks
Network Security · Cloud Security
Fortinet
FortiGate Administrator
Detection & Response · Python · Linux
AWS
IAM · Cloud Security · DevOps
EC-Council
Cybersecurity · Generative AI · Zeek
ISACA
Auditing Generative AI · Risk Mitigation
NEXT CONVERSATION
Let’s strengthen
your security team.
Opportunities in Cybersecurity, Security Operations, AppSec and Security Engineering.
lmorato@gmail.comSão Paulo, Brazil · Remote work