Rômulo Rocha is a Lead Information Security Engineer based in Rio de Janeiro with over 15 years in cybersecurity and nine years of hands-on engineering leadership, currently driving SOC modernization at Nubank. He blends deep incident response and SOC operations expertise with full-stack development skills (JavaScript/Node.js/Python) to automate triage, enrichment, and decision routing, cutting MTTR through pragmatic tool integrations like Torq, Cortex, and Palo Alto. Rômulo has pioneered LLM and agent-driven workflows in production—building context-aware agents with LangChain/LangGraph and async Slack chatbots—to augment CSIRT capabilities and enable real-time monitoring. His background spans high-pressure environments including the Rio 2016 CSIRT and large enterprise SOCs, where he reduced false positives and scaled global response teams accepted into FIRST.org. He is as comfortable authoring Python automation and MCP servers as he is shaping security metrics and compliance reporting, bringing both technical depth and operational rigor. Notably, he combines SOC product thinking with software engineering practices to convert security playbooks into low-code, observable automation.
8 years of coding experience
7 years of employment as a software developer
Pós Graduação, MSI - Master of Information Security, Pós Graduação, MSI - Master of Information Security at Universidade Federal do Rio de Janeiro
Bacharelado, Computer Systems Analysis/Analyst, Bacharelado, Computer Systems Analysis/Analyst at Centro Universitário da Cidade
Contributions:12 commits, 7 pushes, 6 branches in 1 month
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.