About Me

Joas Antonio dos Santos is a distinguished cybersecurity expert with a diverse background spanning Security Engineering, GRC Analysis, DevSecOps, vCISO, and Red Team Leadership. Currently thriving as a Cybersecurity Content Creator and Author, Joas has penned pivotal books in the field, blending hands-on expertise with strategic insights. Leading with an emphasis on offensive security, he directs high-performing teams in consulting, conducts comprehensive pentests, and orchestrates intricate social engineering and physical pentesting operations. His responsibilities also encompass managing Adversary Emulation exercises and the entire Vulnerability Management process, showcasing his comprehensive approach to cybersecurity. Joas's contributions extend beyond practice to education and community engagement, where he is a renowned speaker and teacher at both national and international forums, including his work at Mitre on TTP research and shaping international certification standards. His technical acumen is broad, covering OSINT, Threat Hunting, Cloud and Application Security, and backed by an impressive array of over 90 certifications, including CRTL, CRTO, OSWP/CP, CEH Master, eWPTX, CRTA, and more. His roles as a Mitre Att&ck Contributor, HackerSec Instructor, Microsoft Innovative Educator, Hacking is Not a Crime Advocate, and OWASP Member underscore his dedication to advancing the field. Expert in PenTesting across various domains such as Web, API, Infrastructure, OT/IoT, Cloud, and Mobile Android/iOS, Joas also excels in OSINT, Malware Analysis and Reverse Engineering, Adversary Emulation, Incident Response, and Cyber Threat Intelligence. Specialized in Red Team Exercises and Purple Team Operations, he is proficient in Application Security (SAST, DAST, Code Review) and Cloud Security (AWS, GCP). Joas is also an accomplished programmer in Python, C#, C++, Rust, and Assembly x86/x64.