Senior Security Engineer, Threat Intelligence & Cloud Security at dLocal (2024-10 – Present)
- Built and tuned detection rules across cloud, endpoint, and email telemetry, reducing false positive volume and enabling prioritization of confirmed threats over noise.
- Produced threat intelligence assessments on financially motivated actors targeting payment infrastructure, directly informing detection priorities and incident response playbooks.
- Redesigned the vulnerability management workflow, aligning remediation priorities with real-world exploit intelligence.
- Conducted OSINT investigations of third-party suppliers, identifying material cyber risks that triggered vendor security reviews.
- Collaborated with fraud prevention and IAM teams to correlate threat intelligence with internal signals, contributing to fraud case investigations.
- Crafted incident response reports connecting root cause analysis to business impact and remediation roadmaps for executive stakeholders.
Senior Cyber Threat Intelligence Researcher & Advisor at Oplium Digital Security (2023-08 – Present)
- Shaped the analytical methodology and reporting framework for threat intelligence products, defining collection requirements, analytical standards, and dissemination templates across client engagements.
- Delivered threat landscape assessments and investigation reports covering cybercrime, hacktivism and fraud cases in Latin America and Europe for clients in different industries.
- Developed collection methodologies for external attack surface management and digital risk platform, improving identification of exposed assets and brand abuse across surface, deep, and dark web sources.
- Evaluated and curated intelligence sources, decommissioning low-value feeds and integrating new data sources.
- Led a threat intelligence team delivering threat-informed reports tailored to client's requirements and profiles.
Specialist, Cyber Threat Intelligence at Calian IT & Cyber Solutions (formerly iSecurity Consulting) (2020-01 – 2024-10)
- Led a CTI and Digital Risk Protection practice, managing the full intelligence lifecycle from collection through dissemination for clients across multiple sectors.
- Conducted OSINT, deep and dark web investigations, identifying compromised credentials, data leaks, and threat actor campaigns targeting client organizations.
- Collaborated with red team and incident response teams, providing intelligence-driven targeting for penetration tests and evidence-based context during incident investigations.
- Produced investigation reports informing client remediation decisions, translating findings into actionable recommendations for non-technical stakeholders.
- Supported DFIR engagements with threat actor attribution context and TTP analysis mapped to MITRE ATT&CK.
Senior Analyst → Team Lead, Digital Risk Protection & CTI at Italtel Digital Security (2018-12 – 2020-06)
- Led a threat intelligence team delivering digital risk protection, managing threat event triage, investigation, and mitigation workflows.
- Built detection rules for the Digital Risk Protection platform, identifying brand impersonation, phishing campaigns, and credential leaks.
- Executed takedowns of malicious domains, phishing pages, and fraudulent social media profiles, reducing client exposure to brand abuse and customer fraud.
- Developed external threat detection methodologies adopted as standard practice across the DRP operation.
Cyber Threat Intelligence & Antifraud Analyst at Morphus Cyber Security (acquired by Accenture) (2018-06 – 2018-11)
- Conducted OSINT investigations and proactive threat hunting across surface and deep web, supporting fraud research and takedown operations for financial sector clients.
