Caio Henrique
I'm Caio Henrique, a Cybersecurity Analyst with 6+ years of experience protecting corporate environments through a blend of offensive (Red Team) and defensive (Blue Team) strategies.
I specialize in Vulnerability Management, DevSecOps, and Security Automation, with proven expertise in deploying and managing SIEM, EDR, and XDR solutions. By leveraging frameworks such as MITRE ATT&CK, CIS Controls, and ISO 27001, I help organizations strengthen their detection, response, and overall security posture.
Currently, I focus on:
- Automating and orchestrating security processes to scale efficiency.
- Identifying, prioritizing, and remediating vulnerabilities across environments.
- Continuous monitoring and incident response to reduce risk exposure.
- Hardening infrastructure and applying best practices for resilience.
My mission is simple: to anticipate threats, reduce risks, and deliver security-driven solutions that enable organizations to grow with confidence.
Experience
Cybersecurity Analyst • DevSecOps
Design and optimize DevSecOps pipelines, seamlessly integrating security into CI/CD workflows.
Automate security operations and proactively manage vulnerabilities across complex environments.
Detect, analyze, and respond to threats using advanced SIEM, EDR, and XDR platforms.
Implement offensive and defensive strategies, hardening Windows/Linux servers using CIS Controls, MITRE
ATT&CK, and ISO 27001 frameworks.
Cybersecurity Engineer
With extensive experience in network and system administration and security, my focus is on protecting physical and virtual servers with robust cybersecurity practices. I specialize in virtualization platforms like VMware, Hyper-V, and VirtualBox, and in penetration testing and security audits to mitigate vulnerabilities. I have expertise in Identity and Access Management (IAM), ensuring effective access controls. I use tools such as Zabbix, Grafana, Wireshark, and Wazuh for continuous monitoring and incident response, always seeking to implement best practices and enhance infrastructure protection.
Junior Infrastructure Analyst
I managed and maintained networks and systems to ensure efficiency and security. I gained experience in configuring and supporting network devices and servers, monitoring performance for quick problem resolution. I implemented security practices using tools such as Zabbix, Grafana, Dnsenum, Nessus, Wireshark, and Wazuh. I administered Windows and Linux servers, applied security patches, and monitored logs for suspicious activities. I also contributed to cybersecurity awareness by developing and conducting training on best practices. I consistently sought to expand my skills and face new challenges to enhance system security and performance.
Information Security Analyst
In my role, I managed and configured tools like Zabbix and Grafana for network monitoring and real-time security alerts. I deployed and monitored firewalls and VPNs to protect corporate networks from threats. I handled Identity and Access Management (IAM), ensuring effective access controls. I identified and addressed vulnerabilities using tools like Dnsenum, Nessus, Wireshark, and Wazuh. I managed Windows and Linux servers, applied patches, and monitored logs for suspicious activities. Additionally, I developed and conducted cybersecurity training, creating materials to educate the team on best practices.
Junior Support Analyst
As a Support Technician, I specialized in computer assembly and maintenance. I assembled and configured hardware like motherboards, processors, memory, and hard drives for optimal performance. I installed and configured operating systems and software, adjusting settings for security and user needs. I diagnosed and resolved hardware and software issues, from system failures to compatibility problems. I provided technical support, performed maintenance, updated components, and optimized system performance. I also conducted tests to ensure proper system functionality.
Projects
Note: These projects are complete and currently undergoing restructuring. I’m enhancing documentation and case studies to better showcase the scope and impact of each initiative.
Snyk Golang Scanner
Custom vulnerability scanner for Golang applications with Snyk integration and reporting.
View Project
Infrastructure Vulnerability Dashboard
An automated system for continuous infrastructure vulnerability scanning, reporting, and remediation orchestration.
View Project
Linux Hardening
System hardening for Linux servers aligned with CIS Benchmarks and MITRE ATT&CK, featuring automated auditing and remediation.
View Project
Vulnerability Management
An integrated platform for identifying, prioritizing, and remediating security vulnerabilities in real-time.
View Project
EDR/XDR Endpoint
Advanced endpoint detection and response system with extended detection capabilities for comprehensive threat hunting.
View Project
SIEM
Advanced cybersecurity monitoring and analysis system with real-time threat detection capabilities.
View Project
Network Monitoring
A scalable solution for real-time network monitoring, featuring automated alerts and performance dashboards.
View Project
Vulnerability Management Forum
Collaborative platform for vulnerability tracking, discussion, and remediation coordination.
View Project
Cloud Vulnerabilities
Cloud pentesting leveraging a custom-built tool and AWS Inspector to map findings and prioritize remediation.
View Project
Infrastructure Tools
A collection of automation tools for infrastructure provisioning, compliance, and observability.
View Project
Phishing Campaign
Planning and execution of simulated phishing campaigns to assess and strengthen employee security awareness.
View Project
Security Page
Comprehensive security dashboard with threat intelligence and compliance monitoring.
View Project
Vulnerability Reduction Process
Linux kernel-focused vulnerability reduction process with SentinelOne integration and cyber vulnerability dashboard.
View Project
SIEM Implementation & Optimization
Design, deployment, and fine-tuning of a SIEM solution for centralized log management and real-time threat detection.
View Project
EDR/XDR Deployment & Threat Hunting
Implementation and management of EDR/XDR solutions for advanced endpoint protection and proactive threat hunting.
View ProjectNetwork Monitoring
Project Overview
Designed and deployed an advanced network monitoring and observability platform using Kubernetes and Docker, enabling scalable and resilient performance monitoring across distributed environments. Developed interactive Grafana dashboards for real-time visibility of network health and metrics, and integrated Zabbix automation with smart triggers to detect and alert anomalies before they impact operations.
Technologies Used
Key Features
- Real-time network observability with Grafana dashboards and time-series analytics.
- Automated alerting via Zabbix, using predictive triggers and escalation workflows.
- Scalable microservices architecture deployed through Kubernetes and Docker.
- Optimized performance monitoring and reduced manual intervention by 60%.
- Enhanced infrastructure visibility for proactive network defense and uptime assurance.
Vulnerability Management
Project Overview
Developed and implemented a comprehensive vulnerability management program integrating automated scans, risk prioritization, and remediation tracking across enterprise environments. The process includes weekly security review meetings to analyze testing results, perform targeted penetration tests on critical assets, and maintain visibility through a centralized Jira-based vulnerability board. To enhance organizational awareness, a monthly Vulnerability Forum was established, improving communication between Security, DevOps, and Engineering teams.
Technologies Used
Key Features
- Automated vulnerability scanning using Nessus, Snyk, and AWS Inspector, integrated into the CI/CD pipeline.
- Risk-based prioritization leveraging CVSS scores and business context.
- Seamless integration with Jira for ticket creation, tracking, and SLA enforcement.
- Penetration testing for critical assets with detailed reporting and mitigation validation.
- Centralized dashboards using ELK Stack for visibility across environments.
- Vulnerability Forum to improve visibility, collaboration, and decision-making across teams.
- Continuous improvement cycle through weekly reviews and remediation follow-up sessions.
Infrastructure Vulnerability Dashboard
Project Overview
Developed a fully automated system to manage and visualize EDR vulnerability data across enterprise endpoints. Using Python and the SentinelOne API, the solution collects vulnerability and endpoint telemetry, stores it in a MySQL database, and integrates with Grafana to provide real-time dashboards and threshold-based alerts for proactive remediation. This project enhances the organization’s visibility into endpoint risks and accelerates response actions through data-driven insights.
Technologies Used
Key Features
- Automated vulnerability data collection directly from the SentinelOne API.
- Centralized storage in MySQL for efficient data querying and correlation.
- Real-time Grafana dashboards with thresholds and alerting for high-risk detections.
- End-to-end automation from data ingestion to visualization and reporting.
- Improved response time and vulnerability awareness across endpoints.
SOC Monitoring
Project Overview
Built a 24/7 Security Operations Center (SOC) monitoring platform integrating Wazuh, ELK Stack, and Grafana for real-time threat detection and security analytics across servers and application endpoints. The system provides continuous visibility of security events, automated alerting via Slack, and supports incident response automation to accelerate containment and remediation.
Technologies Used
Key Features
- Continuous 24/7 monitoring of endpoints, servers, and applications using Wazuh agents.
- Automated alerting pipeline integrated with Slack for immediate incident notification.
- Event correlation and log analysis via ELK Stack (Elasticsearch, Logstash, Kibana).
- Grafana dashboards for real-time visualization and trend analysis of threat activity.
- Automated incident response workflows, improving MTTR (Mean Time to Response).
- Compliance-ready audit reports with full traceability of security events.
Vulnerability Management Forum
Project Overview
A collaborative vulnerability management platform designed to enhance visibility, prioritization, and remediation workflows across multiple teams. Every month, the system highlights the Top 10 critical and high-severity vulnerabilities requiring immediate attention, enabling security and engineering teams to act efficiently and align remediation efforts with business priorities.
Technologies Used
Key Features
- Coordinated monthly vulnerability review sessions to identify and prioritize high-impact risks.
- Tracked remediation progress through organized discussion threads and workflow queues.
- Ensured visibility and accountability across multiple technical teams.
- Monitored backlog vulnerabilities to prevent long-term exposure and support continuous improvement.
- Supported business-driven security strategy by aligning remediation priorities with operational impact.
Incident Response
Project Overview
An enterprise-grade Incident Response (IR) automation platform built to accelerate detection, triage, and remediation. The system integrates seamlessly with the Elastic Stack (SIEM) for event correlation and analytics, while automating communications via Slack and workflow management through Jira. Critical incidents trigger dynamic war room sessions, ensuring immediate collaboration and faster containment.
Technologies Used
Key Features
- Designed and implemented custom incident response playbooks covering detection, containment, eradication, and recovery phases.
- Automated end-to-end response workflows using Python scripts integrated with Elastic alerts.
- Built logic-based playbooks capable of triggering specific actions depending on severity, source, and asset impact.
- Integrated Slack for real-time team engagement and alerting, improving coordination across SOC and DevOps teams.
- Automated Jira ticket creation and enrichment with Elastic event data for tracking and post-incident review.
- Established escalation protocols that automatically launch war room sessions for critical or time-sensitive incidents.
- Enhanced mean time to respond (MTTR) by enabling data-driven decision-making and proactive incident containment.
Snyk Golang Scanner
Project Overview
A fully agnostic vulnerability scanning service designed to reduce false positives in Golang projects by integrating with multiple security platforms. Initially built to complement Snyk, the tool also supports generic integration with Veracode, Wazuh, and other security ecosystems. SecScan runs seamlessly within CI/CD pipelines without blocking deployments, ensuring continuous visibility without impacting developer productivity.
Technologies Used
Key Features
- Developed SecScan entirely in Golang, engineered to perform deep dependency and module analysis in Golang repositories.
- Built integrations with Snyk API, Wazuh API (SIEM), and Slack API to automate detection, reporting, and alerting.
- Designed the scanner to operate as an agnostic service, allowing integration with multiple vulnerability management platforms.
- Implemented logic to minimize false positives common in Golang scans, improving accuracy and prioritization of findings.
- Embedded SecScan into CI/CD pipelines for automated, non-blocking scans, maintaining developer workflow efficiency.
- Enabled alert forwarding to Slack for real-time visibility and incident awareness across security teams.
- Provided structured output and data export capabilities for centralized SIEM ingestion and compliance monitoring.
Security Page
Project Overview
A comprehensive security dashboard that provides real-time threat intelligence, compliance monitoring, and security metrics visualization for enterprise security teams.
Technologies Used
Key Features
- Real-time security metrics and threat intelligence
- Interactive dashboards with customizable widgets
- Compliance monitoring and reporting tools
- Alert management and notification system
- Integration with multiple security tools and APIs
- Role-based access control and user management
Vulnerability Reduction Process
Project Overview
An InfraSec-focused vulnerability reduction framework for Linux environments, built to automate kernel patching, enhance endpoint protection, and provide full visibility into system security posture. The solution automates kernel updates on Ubuntu Linux systems, integrates with SentinelOne for real-time endpoint monitoring, and visualizes security metrics through Grafana dashboards for operational transparency.
Technologies Used
Key Features
- Designed and implemented an automated kernel patching and vulnerability reduction system for Ubuntu-based servers.
- Developed Bash scripts triggered via JumpCloud to detect installed kernel versions, headers, and libraries, then download and install the latest secure releases.
- Automated GRUB configuration to ensure the system boots with the updated kernel after reboot.
- Integrated SentinelOne API for endpoint protection and vulnerability telemetry.
- Configured Grafana dashboards to visualize kernel update status, patch metrics, and vulnerability trends.
- Leveraged Python automation to coordinate reporting and ensure consistent remediation across environments.
- Reduced exposure to kernel-level vulnerabilities while maintaining operational stability and compliance visibility.
Linux Hardening
Project Overview
An enterprise-grade Linux hardening framework developed in multiple phases based on the CIS Benchmarks and aligned with MITRE ATT&CK controls. The system automates both auditing and remediation across Linux environments, leveraging policy-as-code principles to ensure consistent and repeatable security configurations.
Technologies Used
Key Features
- Designed and implemented a multi-phase Linux hardening pipeline using CIS Benchmark controls.
- Developed the core engine in Golang to detect and remediate non-compliant configurations across Linux hosts.
- Integrated Bash scripts for low-level system enforcement, executed via JumpCloud for centralized orchestration.
- Built a Python, HTML, and CSS-based dashboard to visualize compliance data and audit results in real time.
- Configured Grafana for log analytics and dashboards, and Slack integrations for automated alerting and notifications.
- Enhanced visibility and compliance tracking across all environments while reducing manual intervention and misconfiguration risks.
Cloud Vulnerabilities
Project Overview
Cloud pentesting engagement utilizing a custom tool I built to enumerate misconfigurations and exposed services, combined with AWS Inspector to correlate and map vulnerabilities for prioritized remediation.
Technologies Used
Key Features
- Custom-built cloud pentest tool for discovery and exploitation
- De-para mapping with AWS Inspector findings
- Risk-based prioritization and remediation guidance
- Automated reporting and dashboards
Infrastructure Tools
Project Overview
A suite of infrastructure automation tools focused on provisioning, compliance as code, and observability to operate secure and reliable platforms.
Technologies Used
Key Features
- Provisioning pipelines with Terraform and Packer
- Compliance as Code with policy enforcement
- Observability stack for metrics and logs
- Reusable modules and CI/CD integration
Phishing Campaign
Project Overview
Specialized consulting in the planning, execution, and analysis of simulated phishing campaigns to measure and enhance human resilience against social engineering attacks.
Technologies & Tools
Key Features
- Realistic phishing attack simulation
- Click and compromise metrics
- Detailed reports by department
- Recommendations for future training
- Strengthening of security culture
SIEM Implementation & Optimization
Project Overview
Consulting on the end-to-end lifecycle of a Security Information and Event Management (SIEM) system. From architecture design and deployment to use case development, rule tuning, and dashboard creation for effective threat monitoring.
Technologies & Tools
Key Features
- Centralized log collection and analysis
- Custom correlation rules for threat detection
- Integration with threat intelligence feeds
- Compliance reporting dashboards (PCI-DSS, GDPR)
- Incident investigation and workflow automation
EDR/XDR Deployment & Threat Hunting
Project Overview
Project focused on deploying and managing Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) solutions. Includes policy configuration, alert tuning, and proactive threat hunting based on MITRE ATT&CK.
Technologies & Tools
Key Features
- Advanced endpoint threat detection
- Automated response and containment
- Proactive threat hunting campaigns
- Behavioral analysis and anomaly detection
- Integration with SIEM and SOAR platforms
Coding Skills
85%
Python
80%
Golang
85%
Shell Script
65%
Ruby
75%
PowerShell
70%
C++
75%
C#
85%
HTML5
85%
CSS
70%
Javascript
70%
MySQL
60%
PHP
Education
loading
BACHELOR'S DEGREE - SOFTWARE ENGINEERING.
Software Engineering is a course that combines computer science and engineering principles to develop, test, and maintain high-quality software systems. Students learn to design efficient solutions, create robust and scalable software, and develop skills in areas such as algorithms, information security, and project management. The program prepares professionals to work in various industries and provides a solid foundation for careers in software development and information technology.
Completed Successfullyd
Systems Development Analyst - Technologist
The Systems Analysis and Development program taught me how to develop and maintain software systems, from analysis and design to implementation. I learned programming, working with databases, and using agile methodologies, which prepared me to create technological solutions that meet real business needs. With this education, I am ready to work in various IT fields, whether in software development, consulting, or project management.
Completed Successfullyd
Computer Networks Technician - Technologist
The Technical Course in Computer Networks offers comprehensive training in network architecture, with a focus on IoT, programming, and information security. It covers requirement gathering, agile methodologies, as well as the configuration and maintenance of network infrastructures. Operating systems, network services, monitoring techniques, and automation are addressed to ensure efficient and secure network management.
Certifications
CRTA - Certified Red Team Analyst
Jul 2024Validates advanced skills in Red Team operations, focusing on simulating real-world attacks to test and improve organizational security posture.
Cisco - Ethical Hacking
Aug 2024Provides expertise in offensive security methodologies within enterprise network environments, focusing on identifying vulnerabilities in Cisco devices.
EC-Council - CERTIFIED ETHICAL HACKER (CEH)
In ProgressDemonstrates expertise in identifying and fixing security vulnerabilities in systems and networks, using the same techniques as malicious hackers.
CompTIA Security+ (SY0-701)
In ProgressA globally recognized certification validating essential knowledge for threat identification, risk management, and incident response.
Cisco - (CCST) Certified Support Technician Cybersecurity
In ProgressValidates foundational knowledge in cybersecurity, covering basic security concepts, threat management, and technical support.
Cisco - (CCST) Certified Support Technician Networking
In ProgressDesigned for professionals who want to validate their fundamental networking skills, including OSI/TCP-IP models and IP addressing.
LPIC-1 Certification
In ProgressValidates fundamental knowledge in Linux system administration, covering installation, configuration, and package management.
EC-Council - Ethical Hacking Essentials (EHE)
Jan 2024Certifies foundational knowledge in ethical hacking, focusing on threat identification and secure practices.
CISCO - Introduction to Cybersecurity
Feb 2024Provides a foundational understanding of cybersecurity, covering essential topics such as common cyber threats and basic protective measures.
Solyd - Introduction to Hacking and Pentest 2.0
May 2024Offers a comprehensive introduction to ethical hacking and penetration testing methodologies and tools.
Udemy - Certified Ethical Hacker (CEH)
Apr 2024In-depth knowledge of ethical hacking techniques, focusing on identifying and mitigating security threats.
Udemy - SOC - Threat Hunting
Apr 2024Focuses on techniques and methodologies for proactive threat detection and response within a Security Operations Center (SOC).
Udemy - SIEM - EDR e XDR
Jun 2024Comprehensive understanding of SIEM, EDR, and XDR, covering deployment, configuration, and management of these critical security tools.
SkillFront - ISO/IEC 27001
Feb 2023Covers the principles and practices of implementing and maintaining an Information Security Management System (ISMS).
Udemy - Wireshark Analyzing Network Attacks
Jun 2024Hands-on training in using Wireshark for network analysis and attack detection, covering how to capture, analyze, and interpret network traffic.
Get in Touch
I'm always open to discussing new projects, creative ideas, or opportunities to be part of your vision. Feel free to reach out.
caiohenriquesinger@gmail.com
Click to copyPhone
+55 (47) 99665-1207
Click to copyLocation
Joinville, SC - Brazil