Marcos Tolosa

IT Security Specialist & DevOps Engineer

Email: [email protected]
Vitória/ES, Brasil

About Me

I spend a tonne of time working on my own stuff. Working on a web/database servers for the hell of it. I like break stuff, rebuild it and repeat. I keep every interesting things can do on my home server and try it; even if i'll never going to use it personally. If anything ever breaks or doesn't make sense, don't drop it until i truly understand what is going on. Avoiding adopt any cargo-cult mentality at whatever cost. If doing this type of stuff sounds like an extreme bore, reconsider your aspirations. I make it works.

Skills & Proficiency

Fully Understand of OWASP methodologies and some related Security Compliances like ISO-27001
Experience with Agile methodologies practices like SCRUM and KANBAN
Big experience with infrastructure, servers, network and security administration
Very solid principles of Ethical Hacking designs/patterns
DevOps Engineer working with tools like Jenkins, Docker, Kubernetes, Ansible and Terraform

Technologies Focused on Linux systems, but I'm also very comfortable on Windows and others unix-like systems

Linux advanced
Python advanced
Cloud(AWS, DO) advanced
Firewalls advanced
Blockchain beginner

Infra Programs and technologies used on DevOps Infrastructure

Ansible advanced
Terraform intermediate
Docker advanced
Kubernetes intermediate
Jenkins advanced

Database Relational and No-Relational databases

PostgreSQL advanced
MySQL advanced
MongoDB intermediate
Redis intermediate

Tools and Processes Any type of technology or methodology used on IT

Ethical Hacking advanced
Cloudflare advanced
Elastic Stack intermediate
Zabbix advanced

Experiences

Web Tecnologia 2017-Present

Chief Information Security Officer & DevOps Engineer

For security reasons, I will only describe the activities performed in this company when closing the services for it.

HackerOne 2017-Present

Bug Bounty & Security Researcher

Discover and report vulnerabilities, bugs, and security flaws in corporate systems.

Freelancer.com 2015-2017

Security Analyst & Infrastructure Engineer

Implement systems Infrastructure, analyzing requirements and functionalities, making modifications to the operation, adapting, specifying its architecture, choosing development tools, specifying programs. Manage environments, provide technical support in all infrastructure. Prepare technical documentation and set standards offering solutions for environments. Performs services on network equipment, such as installation and configuration of computers and network assets. Provides support to the development team, records occurrences, guides users, tracks and eliminates glitches. Negotiates the contracting of services and products, accompanying program maintenance contracts.

ECO Project 2012-2014

Linux SysAdmin & Security Analyst

Supervise network activities, involving the elaboration of projects of implantation, including the monitoring, development and integration of systems, using high technology OpenSource. Safety planning, aiming at the prevention, maintenance and conservation of assets. Administer and analyze systems, raising vulnerabilities, mapping risks and implementing solutions for security of environments and computerized devices and endpoints. Responsible for all infrastructure and administration of systems and servers linux.

UTC Engenharia S.A 2009-2011

Inspector of Quality Control

Review process standards and ensure best performance

See the Pen CV by Marcos Tolosa (@marcos-tolosa-21) on CodePen.