Ygor Maximo

Cyber Threat Intelligence analyst with 7+ years of experience producing intelligence across the threat lifecycle, from dark web investigations and infrastructure analysis to detection engineering and incident response support.

Experience in cyber security consultancies and in the fintech / payments industry, translating external threat research into operational detections and executive-level reporting.

Senior Security Engineer, Threat Intelligence & Cloud Security at dLocal (2024-10 – Present)

• Built and tuned detection rules across cloud, endpoint, and email telemetry, reducing false positive volume and enabling prioritization of confirmed threats over noise.
• Produced threat intelligence assessments on financially motivated actors targeting payment infrastructure, directly informing detection priorities and incident response playbooks.
• Redesigned the vulnerability management workflow, aligning remediation priorities with real-world exploit intelligence.
• Conducted OSINT investigations of third-party suppliers, identifying material cyber risks that triggered vendor security reviews.
• Collaborated with fraud prevention and IAM teams to correlate threat intelligence with internal signals, contributing to fraud case investigations.
• Crafted incident response reports connecting root cause analysis to business impact and remediation roadmaps for executive stakeholders.

Senior Cyber Threat Intelligence Researcher & Advisor at Oplium Digital Security (2023-08 – Present)

• Shaped the analytical methodology and reporting framework for threat intelligence products, defining collection requirements, analytical standards, and dissemination templates across client engagements.
• Delivered threat landscape assessments and investigation reports covering cybercrime, hacktivism and fraud cases in Latin America and Europe for clients in different industries.
• Developed collection methodologies for external attack surface management and digital risk platform, improving identification of exposed assets and brand abuse across surface, deep, and dark web sources.
• Evaluated and curated intelligence sources, decommissioning low-value feeds and integrating new data sources.
• Led a threat intelligence team delivering threat-informed reports tailored to client's requirements and profiles.

Specialist, Cyber Threat Intelligence at Calian IT & Cyber Solutions (formerly iSecurity Consulting) (2020-01 – 2024-10)

• Led a CTI and Digital Risk Protection practice, managing the full intelligence lifecycle from collection through dissemination for clients across multiple sectors.
• Conducted OSINT, deep and dark web investigations, identifying compromised credentials, data leaks, and threat actor campaigns targeting client organizations.
• Collaborated with red team and incident response teams, providing intelligence-driven targeting for penetration tests and evidence-based context during incident investigations.
• Produced investigation reports informing client remediation decisions, translating findings into actionable recommendations for non-technical stakeholders.
• Supported DFIR engagements with threat actor attribution context and TTP analysis mapped to MITRE ATT&CK.

Senior Analyst → Team Lead, Digital Risk Protection & CTI at Italtel Digital Security (2018-12 – 2020-06)

• Led a threat intelligence team delivering digital risk protection, managing threat event triage, investigation, and mitigation workflows.
• Built detection rules for the Digital Risk Protection platform, identifying brand impersonation, phishing campaigns, and credential leaks.
• Executed takedowns of malicious domains, phishing pages, and fraudulent social media profiles, reducing client exposure to brand abuse and customer fraud.
• Developed external threat detection methodologies adopted as standard practice across the DRP operation.

Cyber Threat Intelligence & Antifraud Analyst at Morphus Cyber Security (acquired by Accenture) (2018-06 – 2018-11)

• Conducted OSINT investigations and proactive threat hunting across surface and deep web, supporting fraud research and takedown operations for financial sector clients.

Specialization in Cybersecurity & DevOps – UNIFOR (2024 – 2026)

Post-Graduate in Cyber Threat Intelligence – Daryus (2021 – 2022)

Graduation in Computer Networks – Estácio de Sá University (2017 – 2019)