Ricardo Iramar dos Santos

CTO

São Paulo, Brazil26 yrs 1 mo experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in web application security testing and SDLC.
Led advanced penetration tests as a red team leader.
Passionate about securing web applications and mentoring teams.

Stackforce AI infers this person is a Cybersecurity expert with a focus on web application security in the SaaS industry.

Contact

Skills

Core Skills

Network SecuritySecurity Development Lifecycle

Other Skills

ASPApacheAssemblyBashClusterComputer SecurityDHCPDNSFTPFirewallsFreeBSDFreeRADIUSITILInformation SecurityIptables

About

With extensive experience in web application security testing, the security development lifecycle, perimeter security, and information technology, I have worked across the telecommunications, pharmaceutical, and technology sectors. I continuously sharpen my technical expertise while maintaining a strategic business perspective, strong negotiation skills, and the ability to build relationships at all levels of an organization. Currently, I am deeply focused and passionate about securing web applications.

Experience

26 yrs 1 mo

Total Experience

4 yrs 6 mos

Average Tenure

10 yrs 6 mos

Current Experience

Hp

4 roles

Distinguished Technologist

Promoted

Oct 2025 – Present · 8 mos

Principal Cybersecurity Engineer

Promoted

May 2021 – Oct 2025 · 4 yrs 5 mos

Red team leader with a focus on advanced penetration tests.
Mentor and coordinate team members.
Drive product architecture and design toward secure solution.
Penetration test and security reviews in software development projects.
Provide guidance and follow-up throughout security issues resolution.

Network SecuritySecurity Development LifecycleComputer SecurityInformation Security

Cybersecurity Engineer

Aug 2015 – Apr 2021 · 5 yrs 8 mos

Drive product architecture and design toward secure solution.
Security reviews in software development projects.
Static code analysis, penetration testing and vulnerability scanning.
Provide guidance and follow-up throughout security issues resolution.
Mentor and coordinate team members.

Security Software Engineer

Jun 2011 – Jul 2015 · 4 yrs 1 mo

Plan security activities in project development life cycle.
Drive product architecture and design toward secure solution.
Security reviews in software development projects.
Static code analysis, penetration testing and vulnerability scanning.
Provide guidance and follow-up throughout security issues resolution.
Develop and perform security training.

Owasp foundation

OWASP Secure Headers Project Leader

Dec 2015 – Present · 10 yrs 6 mos · https://owasp.org/www-project-secure-headers/

OWASP Secure Headers Project involves setting headers from the server is easy and often doesn't require any code changes. Once set, they can restrict modern browsers from running into easily preventable vulnerabilities. OWASP Secure Headers Project intends to raise awareness and use of these headers.
If you want to help please send me an email (ricardo.iramar@owasp.org).

Tim brasil s/a

IT Security Applications Team Leader

Aug 2008 – May 2011 · 2 yrs 9 mos

Coordinator of IT Security Applications team with eight members.
Security analysis of projects technical specifications.
Developments in security projects and procedures.
Vulnerabilities Analysis.

Roche

Telecommunications Analyst

Nov 2006 – Apr 2008 · 1 yr 5 mos

Responsible for UA&RA (User Authentication and Remote Access) area in Latin America.
RANGE (Remote Access Next Generation) project implementation in Latin America using SSL VPNs Juniper Networks Secure Access 4000 solution.
ENROLL project implementation in Latin America. Data consolidation and training for more than 150 people in a specific role.
Network support for Cisco switches and routers.

Tivit

Senior Security Analyst

Oct 2004 – Nov 2006 · 2 yrs 1 mo

Management and administration of the TIVIT customer's security environment such as OESP, Gol Linhas Áreas, VISA, Votorantim Group Companies, etc.

Etek

Security Analyst

Dec 2003 – Oct 2004 · 10 mos

Management and administration of the Telmex customer's security environment such as BMF, Ford, BOVESPA (Bolsa de Valores de Sao Paulo), etc.
Development with PHP, Perl and Bash Script security solutions and optimization routines.

Maple informática ltda.

System Analyst

Oct 1999 – Nov 2003 · 4 yrs 1 mo

Security solutions for corporate networks such as firewall (iptables), Proxy (Squid), antivirus for MTA (Qmail+Qmail-Scanner), etc.
Maintenance of file server (Windows 2000), Samba, Microsoft SQL 2000 and MYSQL.
Servers configuration: GNU/Linux, Apache (SSL), FTP, MYSQL, PHP, Samba, NFS, Postfix, etc.
Development client/server system with Visual Basic 6.0.
Installation and updating antivirus solution in corporate networks.