Howdy Logo
Image of Sabrina L.

Sabrina L.
Data Analyst

Python
Microsoft Azure
Amazon Aws
Google Cloud
Bio

With nearly two years of expertise in information security, the individual serves as a DevSecOps Analyst, certified in ISO27001. Responsibilities encompass data protection initiatives, threat and environment monitoring, implementation of security controls, and system supplier integration. The role includes analyzing and investigating security incidents to identify and respond to security events effectively. Dedicated to continuous learning, the professional aims to contribute to forward-thinking companies that value security and technological innovation through disruptive, high-quality solutions.

Activities include web application firewall management, involving blocking suspicious user agents, implementing GeoIP blocking and rate limiting, refining rules, migrating CSR policies, deploying malware checkers, and conducting Tsunami-security-scanner implementations. Identity and access management tasks focus on sanitizing permissions and access profiles, segregating system access, and facilitating access granting. For event threat detection and security health analytics, the analyst manages vulnerabilities and risks, creates health check alerts, and conducts related analyses. Governance, risk, and compliance efforts include communicating security tips on topics like password security and phishing awareness. Endpoint detection and response work encompasses policy reformulation for malware and phishing analysis. Additional contributions involve reducing log input, creating dashboards for metrics and logs, and studying and implementing the SIEM Chronicle tool.

  • Information Security Analyst
    11/1/2021 - Present

    Developed extensive expertise in information security, including the implementation and maintenance of vital security controls such as firewalls, Web Application Firewalls (WAF), and Security Information and Event Management (SIEM) systems. Conducted thorough analyses and investigations of security incidents, supporting the identification and timely response to security events. Fostered a culture of security awareness by creating educational materials, conducting internal campaigns, and participating in company-wide awareness activities. Continuously monitored security events through log analysis and identification of potential threats, ensuring robust protection against vulnerabilities.

    Led and contributed to multiple critical projects. In WAF-related projects, implemented measures to block suspicious or malicious user agents, conducted GeoIP blocking studies and executions, established rate limits, refined security rules, migrated CSR policies, integrated malware checkers using ClamAV, and deployed the Tsunami-security-scanner. In Identity and Access Management (IAM) projects, performed sanitization of service accounts, keys, profiles, and permissions, created new profiles and permissions, enforced segregation of system access, and managed access releases via Pull Requests (PRs).

    In Event Threat Detection and Security Health Analytics, facilitated vulnerability management, risk management, and health checks by creating and analyzing alerts and events. Engaged in Governance, Risk, and Compliance (GRC) efforts by sharing communications and tips on security-related topics with the company, covering secure password practices, phishing, international security day, and business continuity management. Reworked policies related to Endpoint Detection and Response (EDR) and antivirus defenses, performing malware and phishing analysis. Enhanced financial operations (FinOps) by reducing input logs, created comprehensive dashboards for metrics, logs, and health checks, and undertook studies and implementations of SIEM and Chronicle tools.

    Acquired and demonstrated proficiency in a range of security tools and frameworks, fostering an environment of continuous security improvement and resilience against emerging threats.

  • People Management Assistant II
    1/1/2020 - 1/1/2021

    Oversaw software solutions for people management, ensuring seamless integration via API/Web Service. Provided support for tools, conducted updates, and facilitated continuous improvements. Catered to the needs of headquarters, associated cooperatives, and suppliers. Identified areas for improvement and automated processes through software, steering the digital transformation of the department. Developed and applied people analytics, leading the implementation of new solutions.

  • Technical Support
    8/1/2018 - 1/1/2020

    Developed and managed computer settings, domain configurations, Active Directory (AD) management, and email group settings. Gained extensive experience in providing user support. Promoted to technical lead for the ticket system within five months, spearheading system improvements, projects, and operational management. Responsibilities included delivering internal and external support, performing system updates, integrating databases using SQL, and developing reports in Report Builder. Led projects such as Simplify Support and the migration of Ellevo to Azure Cloud. Conducted alignment meetings with coordinators and management, facilitated training for employees, and engaged in various technical activities.

    Transitioned to technical support for Applications and Technology after a year and a half, focusing on customer support activities related to software technology. Acquired expertise in Glassfish, middleware, JAVA, DLL management, installer processes, and proprietary technologies and programming languages. Managed web services and eDocs, enhancing overall technical support capabilities.

  • Support Technician
    2/1/2017 - 8/1/2018

    Supported the School Management System and Modular System by addressing user questions and providing necessary assistance. Managed and conducted user training sessions to ensure smooth operation of the systems. Made modifications to reports using IReport and facilitated remote connections using Team Viewer and AmmyyAdmin. Performed basic queries and updates on databases utilizing SQL Server and Oracle.

  • Forensic Computing Internship
    7/1/2016 - 1/1/2017

    Gained expertise in digital forensics, specifically working with digital, telephone, and computer devices. Managed and recorded the entry of various materials and meticulously checked them for accuracy. Conducted comprehensive evidence extraction, followed by pre-analysis procedures. Prepared detailed expert reports outlining findings and methodologies. Familiar with the use of specialized forensic tools and software essential for the extraction and analysis of digital evidence.

  • Intern
    8/1/2015 - 2/1/2016

    Gained exceptional proficiency in Delphi and JAVA through undertaking comprehensive migration projects. Employed advanced techniques to enhance performance, meticulously identified and resolved defects, and generated detailed analytical reports.

  • Project Office Intern
    2/1/2015 - 6/1/2015

    Interned at the project office of the secretariat of governmental management, providing direct support to the mayor's office. Implemented registration, support, and training for the new project management system, SIGEOR. Developed proficiency in administrative tasks for the Government Planning Directorates and the Resource Capture Directorate. Assisted in drafting memorandums, official letters, and control spreadsheets. Managed email and phone communications for other secretariats, demonstrating strong organizational and communication skills.

  • High school with a technical degree in administration at CEDUP
    2009 - 2012

  • Information Technology at Senac Santa Catarina
    2019 - 2021

  • Information Security at Senac
    2022 - 2023

  • Cyber Intelligence at IDESP
    2024 - 2025

  • Data Scientist at British School of Creative Arts and Technology
    2021 - 2022

  • ISO:27001 FOUNDATION at EXIN
    1/1/2023

Sabrina is available for hire

Hire Sabrina L.
Check icon

All Howdy Candidates are vetted for skills and english proficiency.

Hire Howdy Experts
Hire Now
Related Articles