logo

Matheus Almeida Costa

ABOUT ME
matheus almeida costa

I am DevSecOps and Cloud Security Analyst.

I have a degree in cyber security.
I am very interested in information technology, I am always studying and improving my knowledge in this area, I even share some of this in my Blog, Dev.to, Youtube and Udemy.
I currently specialize in integrating security practices from the design stage of software development to infrastructure implementation in a cloud environment.

Certifications
Honors
Timeline
Degree
Electronics
2017 – 2019

During the technical course in electronics, I had my first contact with programming, developing several projects focused on microcontrollers using the C language.

I also studied computer networks, both in theory and in practice, through the Telecommunications course.

COLTEC - UFMG
Electronics Technician Intern 2019 – 2020

I worked on hardware development for a product, focusing on PCB (Printed Circuit Board) design using Autodesk Eagle.

I also contributed to embedded development for Arduino and ARM microcontrollers, helping to create automation solutions and integrate hardware and software.

FW&HW Sistemas
Degree
Cyber Security
2020 – 2022

During the degree program, I studied the core foundations of information security in a comprehensive and structured way.

The course covered topics such as computer networks, programming, operating systems, penetration testing, digital forensics, cryptography, data protection, monitoring, vulnerability assessment, governance, and risk management.

UNINOVE
Back-end Developer Intern 2021

I worked as a back-end developer using technologies such as C#, .Net and SQL Server with the Scrum methodology.

Pris
Cloud Security Intern 2021 – 2022

I worked in the cloud security department.

My main responsibilities included implementing security controls in AWS, managing a CSPM platform, reviewing Infrastructure as Code (IaC), administering digital certificates (SSL/TLS), and developing process automations related to AWS security.

Main technologies:
Python, Shell Script, Javascript, AWS CLI, Lambda, IAM, SSO, ACM, CSPM, SSL Certificates, Terraform, Git and GitLab.

Inter & Co
Cyber Security Analyst 2022 – 2023

I worked in a generalist role across multiple areas of information security, with a primary focus on AWS cloud security.

I was responsible for designing, integrating, and developing solutions such as APIs, jobs, workflows, and event-driven architectures to support security operations. This work was carried out in collaboration with teams including Threat Intelligence, Network Security, Red Team, SecOps, IAM, and Data Protection.

Main technologies:
AWS, Docker, Kubernetes, GitLab CI, Azure AD, Grafana, Loki, Python, Lambda, Step Functions, DynamoDB, RDS, EventBridge, SNS, SQS, IAM and WAF.

Inter & Co
DevSecOps Analyst 2023 – 2024

I worked on integrating security practices from software development to infrastructure deployment.

I implemented security controls in infrastructure as code (IaC) using Terraform, GitLab CI pipelines, Kubernetes EKS and AWS services.

Main technologies:
AWS, Terraform, Docker, Kubernetes, GitLab CI, Ansible and Python.

Inter & Co
Platform Security Engineer 2025

I work as a Platform Engineer responsible for designing, implementing, and maintaining security services, contributing to both cloud and on-premises infrastructure, automations, pipelines, and observability.

I collaborate with security and platform teams to ensure the implementation of security controls across the entire infrastructure.

Main technologies:
AWS, GCP, Azure, VMware, Elastic Stack (ELK), Terraform, GitHub Actions, Ansible and Python.

Stone & Co
SKILLS

Front-end

Back-end

DevOps

Security

Operations

Front-end

HTML
CSS
Javascript
Bootstrap

Back-end

Python
Django
Flask
FastAPI
SQL
NoSQL

DevOps

AWS
Terraform
Ansible
Shell Script
Docker
Kubernetes
Grafana
GitLab CI
GitHub Actions
PROJECTS
finances app

Swap Role

Browser extension made with HTML, CSS and Javascript to make it easier to switch between AWS roles

temp-content-sharer

Temp Content Sharer

API in Python with Fast API to share temporary content on AWS S3 using presigned URL to download and upload files

password manager script

IAM Policy Analyzer

Python CLI to list all AWS IAM identities that have permissions based on desired Actions and Resources

certscan

certscan

Python CLI to get information about a local or web domain SSL certificate in different formats

vs3code

vs3code

Web application in Python with Flask that works as a text file editor integrated with AWS S3 buckets

weather app

AWS Organizations Policies

A website with a centralized repository of AWS organizations authorization policies for cloud security purposes

agenda app

Policy Converter

A web tool to convert AWS policies from JSON format to Terraform HCL data source code

playlist-reader

Playlist Reader

CLI and API in Python with Flask to generate information from a youtube playlist in order to save the song titles

nam script

NAM

CLI in Python to view command help pages with a focus on practical examples

address

Address CEP

Web App in PHP and MySQL to address management

weather app

Weather App

Web application for weather consultation

password generator app

Password Generator

Web application made with HTML, CSS and Javascript to generate random passwords

Check out my projects on GitHub

CONTACT
<<<

Available for opportunities

>>>

contato@almeidamatheus.me