01
Enterprise Security Architecture & AppSec
Establishing defense-in-depth through systematic threat modeling (STRIDE, PASTA), OWASP ASVS/SAMM frameworks, and automated DevSecOps pipelines integrated into CI/CD environments.
Workbench:dan.seg.br
> Kickstart 40.68 ... CHIP RAM: 2MB, no FAST memory
> IDENTITY: Daniel Gonçalves Araujo [@dandgabr]
> ROLE: Information Security Architect @ Dasa
> SPECIALIZATION: Enterprise Defense | AI Safety & Hardening | AppSec & DevSecOps
SECURITY ARCHITECT @ DASA
CompTIA Security+ ce
LONDRINA, PR — BRAZIL
DANIEL GONÇALVES ARAUJO
Architecting resilient enterprise defenses, forging containment frameworks for autonomous AI agents, and establishing continuous DevSecOps governance.
Enterprise Security
Threat Modeling & DevSecOps
AI Safety & Hardening
MCP & Agent Containment
Cloud & Infrastructure
AWS, Azure, CIS Hardening
INTEL
[SECTION 03]
DOSSIER // PROFESSIONAL INTEL
[OPERATIONAL PROFILE]
Information Security Architect
ORGANIZATION:
Dasa (Largest integrated healthcare network in Latin America)
Operating at the intersection of Enterprise Defense Architecture and Emerging Autonomous Tech, I engineer security frameworks that prevent exploitation before code reaches production and isolate autonomous agents operating in developer workspaces.
My engineering approach is rooted in systems programming, microcontroller diagnostics, and threat containment. With 7+ years of academic background lecturing algorithms, computer security, and electronics, I combine pedagogical clarity with technical rigor in application security, threat modeling, and secure software development lifecycles.
DISCIPLINE:
Security Architecture & DevSecOps
RESEARCH_FOCUS:
AI Safety, MCP Sandboxing, Memory Forensics
ACCREDITATION:
CompTIA Security+ ce
COMMUNITY:
Google Developer Groups (GDG) Speaker
[PRIOR SECURITY ROLES]
- Information Security Architect
- Application Security Engineer
- Information Security Analyst (AppSec)
[DEFENSE METHODOLOGY]
The Three Pillars of Defense
02
AI Safety & Agent Containment
Pioneering practical sandboxing for developer AI tooling. Designing MCP (Model Context Protocol) validation layers and agent skill frameworks to prevent prompt injection and tool misuse.
03
Cloud Security & DevSecOps
Automating security policy enforcement, infrastructure hardening (CIS Benchmarks), container integrity, and compliance controls across multi-cloud environments (AWS & Azure).
SKILLS
[SECTION 04]
CORE EXPERTISE & TECHNICAL DOMAINS
[DOMAIN: 0x01]
Security Architecture & Governance
Enterprise defense design, policy enforcement, and resilient DevSecOps integration.
- Threat Modeling (STRIDE)
- OWASP SAMM & ASVS
- Cloud Security (AWS / Azure)
- DevSecOps CI/CD Pipelines
- PCI DSS Compliance
- Linux & OS Hardening
- Security Champions Leadership
[DOMAIN: 0x02]
AI Safety & Agentic Systems
Hardening autonomous agents, sandbox containment, and protocol-level integration.
- Model Context Protocol (MCP)
- Agent Safety & Containment
- AI Workspace Hardening
- Agentic Skill Architectures
- Academic AI (UTFPR Research)
- Prompt Injection Mitigation
[DOMAIN: 0x03]
Cloud Security & Infrastructure
Enterprise cloud defense, operating system hardening, compliance baselines, and infrastructure security.
- AWS Security Architecture
- Microsoft Azure Security
- Linux OS Baseline Hardening
- CIS Benchmarks & Controls
- Container & K8s Security
- IAM & Identity Governance
[DOMAIN: 0x04]
Languages, Scripting & Tooling
Languages and automation pipelines for rapid validation and reproducible reporting.
- Python (Automation & Analysis)
- Bash & Linux Shell Scripting
- C# (.NET Integrations)
- Typst & Technical Presentations
- Git / GitHub Workflows
- CIS Benchmark Auditing
[DOMAIN: 0x05]
Cryptography & Blockchain
Applied cryptography, distributed-ledger fundamentals and smart-contract engineering.
- Solidity Smart Contracts
- Blockchain Fundamentals
- C# (.NET Integrations)
PROJECTS
[SECTION 05]
FEATURED RESEARCH & OPEN REPOSITORIES
PRJ-01OPEN SOURCE
Elfvision
Monitors AI provider quotas, reset times and API spending from the Linux desktop, with a native GNOME Shell extension.
PRJ-02
OPEN SOURCE
Coacus
A dependency-free skill and agent framework that packages engineering judgment as reusable, versioned artifacts, with a concurrency governor that caps and accounts for every agent a workflow spawns.
> Skill catalog as the single source of truth for agent definitions
> A governor that enforces a hard concurrency cap instead of documenting one
> Handoffs between agents use compact TOON payloads
PRJ-03OPEN SOURCE
Estilos Visuais
An interactive gallery for exploring and comparing interface styles by applying their design tokens to a live demo panel.
PRJ-04OPEN SOURCE
treinamento-si
A security management training proposal with structured learning material and a study application for desktop or browser.
PRJ-05
OPEN SOURCE
mcp-cheatengine
Model Context Protocol (MCP) server interface for Cheat Engine, enabling programmatic inspection, process automation, and security telemetry for AI assistants.
> MCP server bridging LLMs to process inspection
> Real-time process address inspection and automation
> Autonomous agent inspection tooling for developer workflows
PRJ-06
OPEN SOURCE
mcp-security-mitmproxy
An mitmproxy-based security layer for Model Context Protocol traffic, intercepting, decoding, and inspecting tool calls between agents and servers to surface prompt injection and tool misuse.
> Transparent MCP traffic interception via the mitmproxy addon model
> Tool-call payloads decoded so requests and responses are legible in transit
> Rule hooks that flag injected instructions before they reach a tool
PRJ-07OPEN SOURCE
AutoDoc
An MCP server for mapping codebases and producing architecture documentation for AI agent harnesses.
PRJ-08OPEN SOURCE
Linux Security Assessment
A Linux security assessment and compliance tool for collecting evidence, checking controls and supporting hardening.
PRJ-09OPEN SOURCE
gdg-polylux-theme
A reusable Typst presentation theme inspired by Google Developer Groups, with layouts, colors, typography and a sample deck.
ACADEMIC
[SECTION 06]
ACADEMIC TRAJECTORY & CERTIFICATIONS
CERT
CERTIFICATION
CompTIA
CompTIA Security+ ce Certification
Globally recognized credential validating foundational and operational cybersecurity proficiency: network architecture security, threat analysis, incident response, cryptographic controls, and risk governance.
PÓS
POSTGRADUATE
Universidade Tecnológica Federal do Paraná (UTFPR)
Postgraduate Specialization in Artificial Intelligence
August 2024 – March 2026. Specialized research in machine learning paradigms, deep neural architectures, heuristic optimization and automated decision-making models.
PÓS
POSTGRADUATE
UniFECAF
Postgraduate Specialization in Blockchain Development
Completed January 2026. Distributed-ledger fundamentals, smart-contract engineering, applied cryptography and decentralized application architecture.
PÓS
POSTGRADUATE
Faculdade Pitágoras
Postgraduate Specialization in Electric Power Systems
2015. Power-system analysis: generation, transmission and distribution, protection schemes, power-flow studies and electrical machines.
ENG
BACHELOR DEGREE
Faculdade Pitágoras
Bachelor's Degree in Electrical and Electronic Engineering
January 2008 – December 2012. Circuit analysis, analog and digital signal processing, embedded systems, microcontrollers, control theory and hardware-level computer architecture.
DOC
TEACHING
Faculdade Pitágoras · Funtel · CIV
University Teaching
Approximately 7 years. Taught Information Security, Algorithms, Analog and Digital Electronics, Microcontrollers, Electrotechnics and Industrial Automation.
CONNECT
[SECTION 07]
TRANSMISSION CHANNELS // CONNECT
[SECURE COMMUNICATION CHANNELS]
Establish Connection with Security Architect
Available for technical dialogues on enterprise defense architecture, AI agent safety research, threat modeling workshops, and community speaking engagements.
GEOLOCATION:
Londrina, Paraná — Brazil (UTC-3)
POLICY:
Zero spam, direct professional communication via LinkedIn/GitHub only.
SHELL
[SECTION 02]
INTERACTIVE COMMAND SHELL
Workbench:Shell — CON:0/0/640/200/AmigaShell
Type help to list commands, or click any tactical command chip below:
AmigaDOS 3.1 — Kickstart 40.68, Workbench 40.42
AmigaDOS 3.1. Type 'help' for a list of commands.
AmigaDOS 3.1. Type 'help' for a list of commands.
Prefs
Language
CRT scanlines