Pedro Henrique Matheus

At Embraer, I had performed identity and access management, managing supplier contracts that support L1, L2 and L3, managed environments, analyzing and controlling contracted SLAs and KPIs, reorganizing the teams and improving the teamwork. • In the last year, I reorganized the support processes, reducing the meantime of granting the basic access by 200%, integrated the teams and approached the running technical team of the business unit, with result we gain a reduction of the deadline for delivery of the basic access from 15 days to 3 days prior to integration. • I collected IT opportunities and IT issues from international sites, organizing and conducting regular meetings in English with multidisciplinary teams. In the last 3 months, I have designed and implemented an IT access review process to the entire company.

Actively worked with Embraer S. A. Customer together with the Customer Account Management (CAM) of engineering, wherein direct contact with the business areas raised the needs of information security, proposing alternative scenarios with the aim to mitigate or reduce the risks found. I participated in projects as Technical Leader and Requirement Analyst, coordinating the teams in strategic projects for the company's business units, maintaining contact with Stakeholders and Suppliers, always seeking the best solution to the problems encountered.

Teaching in the disciplines of computer networks, including high availability, high availability networks, Converged Networks and Network Services.

During the period of my master's degree I have developed activities related to the research and development of new technologies focused on ​​information security, such as a collection and storage of logs through SIEM, Databases, Text Files among others, with greater Emphasis In analyzing malicious artifacts and correcting information through Honeypots and network resources. During the analysis I had used Virtualization, Cloud Computing, Data Mining and BigData systems to process the information collected on a distribution of collection points. Along with this work, I had an opportunity to disseminate a scientific article in specialized information security, which use Data Mining techniques to guide and display the process of creating signatures for IDS, IPS and optimization systems. At this congress my publication was chosen in a publication with the objective to be published in an ​​information security newspaper (periodical) . After a master's degree, a research in the area of ​​Artificial Immunological Systems was started with the objective of correlating the logs by generating automatic signatures for intrusion detection systems, firewalls and web applications, thus creating a configuration consistent with the flow of information that flow through network.

Acted as a consultant to the Superior Electoral Court, auditing the processes, hardware and source code of the Brazilian electronic ballot box, along with the process of accounting and verification of the votes. During this period I coordinated the team that executed and prepared the public test of the electronic ballot box, and the risk assessment, and the pentest of the assets related to the electoral process using Ethical Hacking concepts. Always in dialogue with the higher courts (Ministers, judges, and authorities), presenting the results of the tests carried out together with suggestions for improvements to both hardware, software and the electoral process. Parallel to the Higher Electoral Court project, I audited the infrastructure, source code and assets of the Ministério Público do Estado de São Paulo (MPSP), regarding the electronic voting system for the election of the attorney general, the Special Organ and the Standing Processor. Audits involved scrutinizing the web application source code along with the cryptographic means involved in the use of digital certificates and the public and private keys along with the project, VPN guidance segregating the polling points of the MPSP network. I have actively worked on improving the code by applying the security development, auditing and security practices described by OWASP and ISO 27001: 2005.

During the period of my scholarship, I had developed a research aimed at increasing the surface area to collecting malicious artifacts on the Brazilian Internet. From this research, I created a Linux distribution capable of automatically installing a honeypot and hardening the operating system and the applications involved (DNS, DHCP, FTP, CIFS, Active Directory, among others). This distribution was installed in more than 40 universities, companies, and government agencies, with the goal of mapping the distribution of malware in Brazil through a web dashboard where partners could gather information to strengthen their security systems. At the same time, I participated in the analysis and collection group of malware, where I was responsible for the development of a SandBox with several operating systems such as Windows 2000, XP, 2003, 2008, Linux and Unix, where they performed automated analyzes of the captured malicious artifacts. This system had the minimum capacity to statically and dynamically analyze 120 malicious artifacts per installed node (Physical Equipment / Operating System), storing the information in a centralized database where analysts could guide their analysis to the most prominent artifacts. Also in this role, I developed and wrote an article on the collection of malicious artifacts on the Brazilian Internet that was published in the Simpósio de Aplicações Operacionais em Áreas de Defesa realizado no Instituto Tecnológico da Aeronáutica (ITA).