About Doug Morato

As cyber security professional, my career focus has been to secure applications and reduce organizational risk and threat landscape, by providing consultation and subject matter expert feedback on securing applications design and implementation. My area of knowledge spans through all phases of the SDLC, with active hands-on knowledge of threat modeling, secure design, static code analysis, penetration testing and continuous monitoring and security (defensive) operations. I have been able to collaborate with internal and external customers, ranging from Fortune 10 companies, government/Defense contractors, Big 4 accounting firms, multi-nationals as well as small and medium sized business. I was afforded the opportunity to work in the Healthcare, Financial Services, Tech Services and Consulting industries. I have broad experience providing secure architecture recommendations aligned with the Information Security Policies and industry best practices, performing threat modeling, conducting vulnerability assessments, web application, mobile application and network penetration tests, secure/static coding analysis, application security assessments, automating and embedding security in SDLC, fostering Security in DevOps work streams. Multilingual proficiency in English, Brazilian Portuguese and Spanish.