Fabio de Souza

Technical leader responsible for implementing the SOC; Defining technical information security requirements; Analyzing security architecture, procedures and solutions in order to improve them; Participating in and defining the security architecture of new solutions; IT projects focusing on new solution projects, IT architecture developments and information security incident response plans; Conducting information security routines directed to the area; Participating in change committees to assess information security risks; Creating, managing and disseminating security baselines based on asset groups and technological solutions adopted by the company; Experience in reviewing and implementing information security policies; Knowledge of LGPD and GDPR regulations. Conducting workshops and training; Skills in incident response and reporting; Experience in information security campaigns; Knowledge of security frameworks (NIST, ISO 27001, OWASP); Operating cybersecurity solutions implemented in the company's technological environment; Identification of potential weaknesses and vulnerabilities, and definition and application of protection controls; Cyber ​​hygiene; Generation and presentation of reports and indicators for different related hierarchical levels; Creation, validation and review of alerts; Identification and treatment of real threat alerts; Incident response, mobilization of teams responsible for the solution, and recommendation and follow-up of corrections; Analysis of performance indicators and treatment of security alerts; Threat Intelligence process for analysis of feeds, threat reporting and implementation of recommendations in security tools and processes;

Design and implement network solutions that meet business needs; Design and creation of data center, office and topology, to allow the communication between them; Manage and monitor all company network systems; Ensure the integrity, high availability and security of the company network; Resolve security and connectivity issues; Configure, test and update network software and hardware; Technical support and guidance for users with different levels of technical knowledge; Perform advanced network analysis and performance assessments; Plan network-related changes; Report directly to the CTO;

Maintain and configure WAF Create and review the firewalls and proxy rules Create dashboard in Splunk to monitor security flaws and incidents Update and maintain the anti-malware Troubleshoot the security problems(CSIRT actuation) Compliance and best security practices for certifications such as PCI.

Level 3 in support of the entire network and security environment of Via Varejo, such as stores, corporate, distribution centers and E-commerce. Scope: E-commerce and physical stores Troubleshooting of networks (LAN, WAN, WLAN); Migration, implementation and management of load balancers; Programming in TCL/TK, development and troubleshooting in iRules; Programming in Shell Script; Remote and on-site support; Specialist in F5 BIGIP TMOS, LTM and GTM