He started his information security career as a partner of the extinguished BufferOverflow.org, later working as a consultant and information security specialist at some of the biggest Brazilian companies, being responsible for penetration tests, architecture design and implementation. Worked as QSA at the first PCI-DSS certification project in Brazil for VisaNet, evaluating more than 50 merchants afterwards. He was also a member of the operational security team for the XV Pan American Games of Rio de Janeiro, with more than 10 years of experience in the field and is CISSP, CISM and PCI-ISA certified.