Senior Mobile Security Engineer

• Jan 2023 - Present

Malware Analyst and Reverse Engineer

• Sep 2021 - Jan 2023

Sr. Reverse Engineer at Google Play Protect team: analyze, reverse and catalogue Android malware. Tasks: > Analyze, statically and dynamically, multiple applications a day > Create automated rules to detect non-compliant applications > Document new malware variants and techniques > Share important knowledge with the team (as well as receive it) > Build tools to help automate the job and be more productive > Be precise and avoid cataloguing errors as best as possible. Maintain a high accuracy level. Show less

MS Thesis Defense

• Jan 2021 - Mar 2021

> Plan and prepare the defense of my thesis with the help of my supervisor Pedro Adão> Defend my thesis> Prepare the dissertation for public availability by rewriting some parts of it (common procedure after the thesis and its defense are officially evaluated)

MS Thesis Delivery

• Nov 2020 - Dec 2020

> Restructure all the thesis work I had done until this point> Full-time working on the development of the thesis coded solution> Full-time writing the thesis

Cybersecurity Analyst and Engineer

• Sep 2019 - Nov 2020

The Portuguese National Cybersecurity Center operations team, known as CERT.PT to the public, coordinates the response to incidents involving Public Administration entities, critical infrastructure operators, essential service operators and digital service providers in addition to the entire national cyberspace, including any device belonging to a network or address block assigned to an electronic communications operator, institution, legal or natural person headquartered in Portuguese territory, or who is physically located in Portuguese territory. The following activities are to emphasize: > Incident Analysis: gather and analyze evidence attached to a certain incident (e.g. OSINT, computer/network forensics, malware analysis) > Incident Response: respond to cyber security incidents involving the Portuguese cyberspace, taking appropriate action where needed (e.g. take down a malicious internet asset, report open vulnerabilities, secure hosts/networks, etc.) > Own security clearance to access classified information (SECRET: National, NATO and EU) > Attend national and international events representing the organization > Help organize and monitor in-house public events > Learned the basics of the NIST framework > Connected an internal SAML Identity Provider (IdP) to an internal Service Provider (SP) to separate the various users and their permissions within the service > Internal tool development (mainly JavaScript, PHP and Python) > Scripting (mainly Python and shell script) > Write weekly incident reports for ENISA and the European CSIRTs Network > Use data management tools such as MISP and Splunk > Use RTIR (a ticket-tracking system specifically designed for incident response) At the same time, I was also studying to finish the 2nd year of my master's degree. Show less

Cybersecurity Analyst and Engineer

• Jul 2017 - Sep 2019

Tekever's cybersecurity team was concerned with testing the security of the company's systems, networks and products, as well as hardening those by implementing and employing diverse security solutions. Furthermore, continuously performing cybersecurity-related R&D was also an activity of our team. The following activities are to emphasize: > Hands-on research about penetration testing and reverse-engineering techniques > Research about various cryptography algorithms and implement simple key handling (generation, distribution and management) mechanisms > Penetration testing of Windows- and UNIX- based systems > Penetration testing of enterprise networks > Reverse engineering of Java and web applications > Reverse engineering of APK files (JAR, DEX, smali) > Reverse engineering of 32- and 64- bit ELF binary files > Reverse engineering of Solidity contracts > Analysis and review of several cybersecurity regulations (General Data Protection Regulation - European regulation 2016/679, the most relevant one at the time), their implications, and expected preparation and mitigation measures > Software development (mainly Python, some Java and C) > Scripting (mainly Python and shell script) > Configuring iptables firewalls > Learning how to design and implement secure network architectures > Learning how to set up and configure signature-based IDSs (Snort and Suricata) > Creation of AI-based cybersecurity solutions > Development of anti-reversing mechanisms > Research, analysis and review of state-of-the-art cyber-physical system security in distributed architectures > Set up cryptographically secure OpenVPN channels between multiple remote company branches > Hands-on research about Bitcoin, Ethereum and the Blockchain technology > Design and implementation of secure network protocols and data storage mechanisms Show less

Chess Teacher

• Feb 2019 - Jul 2019

Teach weekly chess classes Teach weekly chess classes