Andre Guerra

Experience

• 

  GVT

  Jun 2006 - Apr 2008

  Created reports targeting fraud and revenue leaks detection/prevention using PERL scripts and SQL. Configured fiber optics networks (SDH). Generated radio equipment availability reports using PERL scripts.

  • Fraud Analyst

    Apr 2007 - Apr 2008

  • Internship

    Jun 2006 - Mar 2007
• 

  RoqueCorreia, Automação

  Apr 2008 - Feb 2009

  PLC/SCADA Systems Developer

  Developed automation systems using industry standard PLC's (GE Fanuc, SIEMENS) for sanitation, energy and automotive applications. Automated documentation of control diagrams in AutoCAD using VBA.

• 

  ExxonMobil

  Mar 2009 - Sept 2013

  SAP Security Analyst

  SAP Security consulting. Worldwide operational support. Worked in 3 SAP/R3 upgrade projects supporting around 15.000 users and contributed to the Identity and Access Management project proof of concept using Sailpoint IIQ. Made strong use of automation scripts on maintenance tasks such as id creation and SOX compliance checks.

• 

  RGK - Construções, Montagens e Empreendimentos

  Oct 2013 - Mar 2018

  Electrical Engineer

  Managed electrical substation implementation projects for the public sector being a liaison with equipment manufacturers. Supported field workers. Provided internal network infrastructure support. Assisted on legal. Managed revenue: US$ 30 million across 30 different projects.

• 

  ExxonMobil

  Mar 2018 - Oct 2020

  Facilitated team communication and interfaced with management on strategic solutions for automated security checks on software deployment pipelines. Spoke at local meet-ups helping promote software security practices company wide. Continued previous work on backend development. Developed a scalable web API to allow integrated security testing of web apps using Python, Flask, MongoDB, containers and Azure. Primary contact for vulnerability scans. Vendor solutions assessment.

  • Backend Developer & Technical Lead at the Software Security Group

    Dec 2019 - Oct 2020

  • Backend Developer at the Software Security Group

    Mar 2018 - Dec 2019
• 

  SAP

  Oct 2020 - now

  - Develops and maintains backend systems using Golang and Python.- Implements secure authentication/authorization using OAuth2.- Manages cloud infrastructure with Terraform, deploying to AWS and Azure.- Establishes source control and branching practices for efficient collaboration and automation.- Mentors colleagues from multiple SAP teams on Software Security related topics and programs.- Makes extensive usage of AWS services to deliver fully working container based applications, namely: Elastic Container Service (ECS) Fargate, DynamoDB, Key Management Service (KMS), S3, and all required resources to deploy them securely. Show less Certified Security Expert as part of SAP's one year curriculum on secure software development (JUN/2022)...Provided guidance and pull requests to development teams of SAP Data Intelligence in the area of automated security testing...Developed CICD friendly CLI tools (in Rust and Python) to complement functionality of internal and vendor tools used in security and intellectual property scans while facilitating pipeline breaks when issues occur. These are placed at SAP's inner sourcing program to stimulate collaboration across different product areas...Owned change management process of the SAP Datasphere product (specifically the Data Intelligence portion). This entailed documenting the process from code change to product deployment and sharing it with development and management teams with the goal to provide a holistic view of the development/deployment cycle...Provided training to SAP's security curriculum (Seculum) in the area of security tools for open-source, SAST and manual testing (e.g.: Whitesource, Blackduck, Fortify, Checkmarx, Portswigger BURP, OWASP ZAP, etc). Show less

  • Senior Developer | DevOps at the Enterprise Cloud Services Team

    Mar 2024 - now

  • Lead Security Engineer at the SAP Big Data Fabric Services Team

    Apr 2023 - Feb 2024

  • Senior Security Engineer at the SAP Data Intelligence Team

    Oct 2020 - Jul 2023