{"id":32,"date":"2026-08-04T01:59:51","date_gmt":"2026-08-04T01:59:51","guid":{"rendered":"https:\/\/douglasrossetto.com.br\/projetos\/"},"modified":"2026-08-04T04:18:00","modified_gmt":"2026-08-04T04:18:00","slug":"projetos","status":"publish","type":"page","link":"https:\/\/douglasrossetto.com.br\/en\/projetos\/","title":{"rendered":"Projects"},"content":{"rendered":"
\n

Projects that I implemented and operate at AKAD Seguros, aligned with strategic security and IT infrastructure modernization.<\/p>\n

\n

\ud83c\udfd7\ufe0f Information Security Area Construction \u2014 AKAD Seguros<\/h3>\n

FOUNDATIONAL PROJECT \u00b7 2024 \u2013 PRESENT<\/p>\n

Complete structuring of the Information Security area at AKAD Seguros do nothing<\/strong> \u2014 from the absence of formal processes to a mature SOC operation with full visibility, automation, and established governance.<\/p>\n

\n

\ud83d\udcc8 What was built:<\/p>\n

    \n
  • Operational SOC:<\/strong> Microsoft Sentinel implemented from scratch \u2014 analytical rules, automation playbooks, and daily L3 triage<\/li>\n
  • Total visibility:<\/strong> Integration of Azure, AWS, Entra ID, Meraki, Cloudflare, and endpoint logs into a single dashboard<\/li>\n
  • Zero Trust:<\/strong> Redesigned identity architecture \u2014 mandatory MFA, Conditional Access, Global Secure Access, and Identity Governance<\/li>\n
  • Perimeter protection:<\/strong> Cloudflare Enterprise on 4 domains with WAF, DDoS, and custom rules<\/li>\n
  • Automation:<\/strong> BUD Network with 60+ AI agents for SOC Autopilot, reports and automatic triage<\/li>\n
  • Compliance:<\/strong> LGPD, CIS Controls, security policies, and company-wide awareness program<\/li>\n
  • Governance:<\/strong> Vulnerability management processes, Shadow IT, EASM, and AWS exposure remediation<\/li>\n<\/ul>\n<\/div>\n<\/div>\n
    \n

    \ud83d\udee1\ufe0f SOC \u2014 Microsoft Sentinel<\/h3>\n

    DETECTION & RESPONSE<\/p>\n

    Implementation and operation of a centralized SOC. Proactive detection, N3 analysis, playbook automation, and MTTR reduction. Daily triage of 13+ incidents with documented closure.<\/p>\n<\/div>\n

    \n

    \ud83d\udd10 Zero Trust \u2014 Microsoft Entra ID<\/h3>\n

    IDENTITY & ACCESS<\/p>\n

    Corporate identity redesign with Zero Trust architecture. Conditional Access policies, mandatory MFA, and continuous monitoring of privileged accounts.<\/p>\n<\/div>\n

    \n

    \ud83c\udf10 Microsoft Global Secure Access (ZTNA)<\/h3>\n

    ZTNA & SECURE ACCESS<\/p>\n

    Secure application access without traditional VPN, with granular control by identity, device, and location. Perimeter model replacement with context-based access.<\/p>\n<\/div>\n

    \n

    Identity Governance \u2014 Microsoft Entra<\/h3>\n

    Identity Governance<\/p>\n

    Access lifecycle, automated access reviews, secure onboarding\/offboarding, and just-in-time access policies. Control who has access to what \u2014 and why.<\/p>\n<\/div>\n

    \n

    Cloudflare Enterprise \u2014 WAF & DDoS<\/h3>\n

    WEB PERIMETER PROTECTION<\/p>\n

    WAF on 4 AKAD domains, malicious scanner blocking, DDoS protection, and traffic analytics. Custom rules with bypass for legitimate partners.<\/p>\n<\/div>\n

    \n

    \u2601\ufe0f Cloud Security Posture \u2014 AWS & Azure<\/h3>\n

    CSPM & HARDENING<\/p>\n

    Continuous security posture management. Remediation of exposed Security Groups, Secure Score, GuardDuty, and compliance policies. Over 35 security groups remediated.<\/p>\n<\/div>\n

    \n

    \ud83e\udd16 BUD Network \u2014 Corporate AI<\/h3>\n

    AUTOMATION & AI<\/p>\n

    Architecture of 60+ specialized AI agents. Security task automation, email triage, Shadow IT reports, and SOC Autopilot integrated into Sentinel.<\/p>\n<\/div>\n

    \n

    \ud83d\udcca Shadow IT & EASM<\/h3>\n

    VISIBILITY & CONTROL<\/p>\n

    Discovery of Shadow IT via Microsoft Defender for Endpoint. Monthly reports by category (AI, cloud, webmail, BYOD) and external attack surface reconnaissance.<\/p>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

    Projetos que implementei e opero na AKAD Seguros, alinhados com seguran\u00e7a estrat\u00e9gica e moderniza\u00e7\u00e3o da infraestrutura de TI. \ud83c\udfd7\ufe0f Constru\u00e7\u00e3o da \u00c1rea de Seguran\u00e7a da Informa\u00e7\u00e3o \u2014 AKAD Seguros PROJETO FUNDACIONAL \u00b7 2024 \u2013 PRESENTE Estrutura\u00e7\u00e3o completa da \u00e1rea de Seguran\u00e7a da Informa\u00e7\u00e3o da AKAD Seguros do zero \u2014 desde a aus\u00eancia de processos formais…<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-32","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/pages\/32","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/comments?post=32"}],"version-history":[{"count":4,"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/pages\/32\/revisions"}],"predecessor-version":[{"id":77,"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/pages\/32\/revisions\/77"}],"wp:attachment":[{"href":"https:\/\/douglasrossetto.com.br\/en\/wp-json\/wp\/v2\/media?parent=32"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}