Everton Michels

Experience

• 

  ExxonMobil

  Aug 2006 - Dec 2007

  - Worked in a global team, identifying risks and developing cost-effective mitigating controls to receive satisfactory audit. - Managed Windows Servers, troubleshooting software and hardware issues;

  • Security & Control Analyst

    Jan 2007 - Dec 2007

  • PC Server Operations Specialist

    Aug 2006 - Jan 2007
• 

  Banco do Brasil

  Dec 2008 - Apr 2016

  IT Security Analyst

  - Vulnerability Assessment and Penetration Testing;- Vulnerability Analysis and Evaluation;- Manage and design security policies;- Identify and analyse security risks;- Design and implement mitigating controls;- Manage security solutions such as antispam, antivirus, web filtering, web caches and proxies;- Support the security infrastructure such as firewalls, servers and appliances;- Speaker on Security Awareness trainings among employees;

• 

  ABNT

  Mar 2012 - Apr 2016

  ABNT Member

  Bank of Brazil's representative in the ABNT task force, responsible for designing ABNT ISO NBR 27001 and 27002, focusing on information life cycle, classification and redaction.

• 

  Cobalt.io

  Mar 2016 - May 2017

  Core Researcher and Curator

  - Evaluation and Validation of Security Vulnerabilities on Cobalt.io's platform.- Perform Penetration Testing on Web Applications.

• 

  HackerOne

  May 2017 - now

  - Part of the Events POD, dedicated to Live Hacking Events and Bug Bounty Challenges;- Working with Leadership to develop and improve triage processes and workflows;- Provide technical advisory to the Chief Hacking Officer;- Provide leadership and training to the associates program;- Leading the efforts on triaging complex security vulnerabilities;- Work with the Triage Manager to improve policies, procedures, communication style and efficient triaging processes;- Promote knowledge transfer and develop new subject matter experts by cascading your knowledge across the entire team;- Develop promotion criteria for analysts and provide technical coaching throughout their journey with the triage team;- Monitor performance SLAs and help the team dynamically prioritize work assignments;- Partner with Triage Manager to instill a results oriented team culture focused on operational excellence and delivering a best-in-class experience for customers and security researchers;- Act as a conduit between the triaging team and the management team, along with other areas of the company, identifying pain points, and solutions, that will improve the team's processes and help the team deliver outstanding results. Show less - Leading the efforts on triaging complex security vulnerabilities;- Work with the Triage Manager to improve policies, procedures, communication style and efficient triaging processes;- Promote knowledge transfer and develop new subject matter experts by cascading your knowledge across the entire team;- Develop promotion criteria for analysts and provide technical coaching throughout their journey with the triage team;- Monitor performance SLAs and help the team dynamically prioritize work assignments;- Partner with Triage Manager to instill a results oriented team culture focused on operational excellence and delivering a best-in-class experience for customers and security researchers;- Act as a conduit between the triaging team and the management team, along with other areas of the company, identifying pain points, and solutions, that will improve the team's processes and help the team deliver outstanding results. Show less

  • Senior Triage Technical Lead

    Mar 2023 - now

  • Triage Technical Lead

    Nov 2021 - Mar 2023

  • Security Analyst III

    May 2020 - Nov 2021

  • Security Analyst

    May 2017 - May 2020