EDUARDO ELLERY · INFORMATION SECURITY
Application security specialist with experience in AppSec and SecOps. From identifying vulnerabilities to responding to incidents, I connect security and development.
Explore my experienceFortaleza, Ceará · Brazil
01 / PROFILE
Over 10 years of experience in information security, bringing together offensive security and security operations.
I work on web, API and mobile penetration testing, threat modeling and secure code review. My experience includes integrating security testing into development, vulnerability management, SIEM administration and incident response.
At PagSeguro PagBank, I worked on applications used by more than 30 million customers. My background also includes infrastructure, networks and security solution deployment.
02 / EXPERIENCE
From operations to application security.
Information Security Specialist
Vulnerability assessments and penetration testing of web applications and APIs. Threat modeling, architecture analysis and remediation coordination through GitHub Issues and Jira.
Integration and execution of SAST/DAST in the GitHub DevSecOps pipeline, and guidance on WAF and Bot Management aligned with ISMS policies and ISO 27001.
Security Engineer AppSec
Web, API and mobile penetration testing. Threat modeling with OWASP and STRIDE, and code review using Fortify, Semgrep and Snyk.
Contributions to an ISO 27001-aligned S-SDLC, vulnerability management and security awareness for development and SRE teams.
Senior Technical Consultant
Deployment of QRadar, CyberArk and Tenable. SIEM query development, incident response support, vulnerability assessments and external black-box penetration testing.
Cyber Security Operations Analyst
LogRhythm SIEM administration, threat investigation, reporting and initial incident response. CA PAM implementation for privileged access management.
COGECT · IT Analyst · May 2014 – Jul 2015
Norsa · IT Analyst · Nov 2011 – May 2014
Kyrium IT Solutions · Project Manager · Apr – Nov 2011
Empreendimentos Pague Menos SA · Infrastructure Systems Analyst · Mar 2010 – Mar 2011
Rapix Tecnologia e Internet · Operations Manager and Network Coordinator · Mar 2005 – Dec 2009
IBEU-CE · Network & Systems Administrator · 1996 – 2004
INFOSERV · Coordinator · Feb 1995 – Feb 1996
03 / SKILLS
AppSec · Web, API and mobile penetration testing · Threat modeling · OWASP · STRIDE · Secure code review
DevSecOps · S-SDLC · SAST / DAST · Vulnerability management · ISO 27001
SecOps · SIEM · Incident response · IAM · Privileged access management
04 / EDUCATION
Uniamérica · Apr 2022 – Apr 2026
Universidade Estácio de Sá · 2018 – 2019
Faculdade Integrada do Ceará · 2000 – 2002
Portuguese · native or bilingual
English and Spanish · professional working proficiency
05 / CONTACT