Professional experience across adversary simulation, malware development, automation and IT infrastructure — supported by hands-on offensive security certifications.
At S2GRUPO, I deliver hands-on awareness sessions and controlled phishing campaigns for private companies and public-sector organizations. I manage Linux VPS instances, domains, DNS and campaign platforms, create tailored email templates and landing pages, and turn campaign results into technical and executive reports with actionable recommendations.
At Áudea, I developed custom tools to reduce manual effort in ethical hacking operations and worked on the Ransomware Simulator platform. I integrated agentic AI and LLMs using Google Gemini and ADK to automate complex attack scenarios, supported threat modeling, and developed active and passive antivirus evasion techniques.
During my IT internship at ARKANUM PICTURES in Berlin, I worked with databases, C programming, virtualization and tools such as Unity and Unreal Engine. I also supported networks and production hardware, from routers and Raspberry Pi devices to workstations, cameras, displays and cabling.
I have worked through 120+ machines and regularly practice on Hack The Box, Vulnlab, HackMyVM and Dockerlabs. I document techniques and lessons in my write-ups, and build tools such as Hit-The-Dns to automate recurring tasks. Labs, CTFs and personal projects help me stay current, explore new techniques and keep improving my offensive security workflow.
