sec_core_v6.12_hardened.sys — 80x24 VT100
CIPHER: CHACHA20-POLY1305

> BIOS_CHECKSUM: OK | KERNEL_LOAD: 0x00007FFD... ACCESS_GRANTED

> IDENTITY: Daniel Gonçalves Araujo [@dandgabr]

> ROLE: Information Security Architect @ Dasa

> SPECIALIZATION: Enterprise Defense | AI Safety & Hardening | AppSec & DevSecOps

SECURITY ARCHITECT @ DASA CompTIA Security+ ce LONDRINA, PR — BRAZIL

DANIEL GONÇALVES ARAUJO

Architecting resilient enterprise defenses, forging containment frameworks for autonomous AI agents, and establishing continuous DevSecOps governance.

Enterprise Security Threat Modeling & DevSecOps
AI Safety & Hardening MCP & Agent Containment
Cloud & Infrastructure AWS, Azure, CIS Hardening
> INTERACTIVE TERMINAL # INSPECT RESEARCH ↗ GITHUB PROFILE
[SECTION 02]

INTERACTIVE COMMAND SHELL

guest@dandga-kernel:/workspace (bash 5.2)
TTY: /dev/pts/0
Type help to list commands, or click any tactical command chip below:
Security Shell v2.4.0 (x86_64-hardened-linux)
Session initialized for peer review. Type 'help' for guidance.
[SECTION 03]

DOSSIER // PROFESSIONAL INTEL

[OPERATIONAL PROFILE]

Information Security Architect

ORGANIZATION: Dasa (Largest integrated healthcare network in Latin America)

Operating at the intersection of Enterprise Defense Architecture and Emerging Autonomous Tech, I engineer security frameworks that prevent exploitation before code reaches production and isolate autonomous agents operating in developer workspaces.

My engineering approach is rooted in systems programming, microcontroller diagnostics, and threat containment. With 4+ years of academic background lecturing algorithms, computer security, and electronics, I combine pedagogical clarity with technical rigor in application security, threat modeling, and secure software development lifecycles.

DISCIPLINE: Security Architecture & DevSecOps
RESEARCH_FOCUS: AI Safety, MCP Sandboxing, Memory Forensics
ACCREDITATION: CompTIA Security+ ce
COMMUNITY: Google Developer Groups (GDG) Speaker
[DEFENSE METHODOLOGY]

The Three Pillars of Defense

01

Enterprise Security Architecture & AppSec

Establishing defense-in-depth through systematic threat modeling (STRIDE, PASTA), OWASP ASVS/SAMM frameworks, and automated DevSecOps pipelines integrated into CI/CD environments.

02

AI Safety & Agent Containment

Pioneering practical sandboxing for developer AI tooling. Designing MCP (Model Context Protocol) validation layers and agent skill frameworks to prevent prompt injection and tool misuse.

03

Cloud Security & DevSecOps

Automating security policy enforcement, infrastructure hardening (CIS Benchmarks), container integrity, and compliance controls across multi-cloud environments (AWS & Azure).

[SECTION 04]

CORE EXPERTISE & TECHNICAL DOMAINS

[DOMAIN: 0x01]

Security Architecture & Governance

Enterprise defense design, policy enforcement, and resilient DevSecOps integration.

  • Threat Modeling (STRIDE)
  • OWASP SAMM & ASVS
  • Cloud Security (AWS / Azure)
  • DevSecOps CI/CD Pipelines
  • PCI DSS Compliance
  • Linux & OS Hardening
  • Security Champions Leadership
[DOMAIN: 0x02]

AI Safety & Agentic Systems

Hardening autonomous agents, sandbox containment, and protocol-level integration.

  • Model Context Protocol (MCP)
  • Agent Safety & Containment
  • AI Workspace Hardening
  • Agentic Skill Architectures
  • Academic AI (UTFPR Research)
  • Prompt Injection Mitigation
[DOMAIN: 0x03]

Cloud Security & Infrastructure

Enterprise cloud defense, operating system hardening, compliance baselines, and infrastructure security.

  • AWS Security Architecture
  • Microsoft Azure Security
  • Linux OS Baseline Hardening
  • CIS Benchmarks & Controls
  • Container & K8s Security
  • IAM & Identity Governance
[DOMAIN: 0x04]

Languages, Scripting & Tooling

Languages and automation pipelines for rapid validation and reproducible reporting.

  • Python (Automation & Analysis)
  • Bash & Linux Shell Scripting
  • C# (.NET Integrations)
  • Typst & Technical Presentations
  • Git / GitHub Workflows
  • CIS Benchmark Auditing
[SECTION 05]

FEATURED RESEARCH & OPEN REPOSITORIES

PRJ-01 PRODUCTION
AI Safety Hardening

🛡️ hardening-ia

Automated security hardening framework designed for AI-assisted development environments. Implements sandbox verification, API token boundary enforcement, and permission audits.

> Zero-trust isolation for local AI coding CLI tools
> Workspace token and credential leakage prevention
> Automated compliance and baseline validation audits
REPO ↗
PRJ-02 PRODUCTION
Agentic AI Modular Skills

🧠 skills

A battle-tested ecosystem of standardized, modular skills engineered for AI coding agents, multi-agent orchestration, and developer assistants.

> Standardized capability contracts across 50+ domains
> Multi-agent supervisory and governance patterns
> Deterministic execution paths for autonomous coding
REPO ↗
PRJ-03 INTEGRATION
Model Context Protocol Process Automation

🧩 mcp-cheatengine

Model Context Protocol (MCP) server interface for Cheat Engine, enabling programmatic inspection, process automation, and security telemetry for AI assistants.

> MCP server bridging LLMs to process inspection
> Real-time process address inspection and automation
> Autonomous agent inspection tooling for developer workflows
REPO ↗
PRJ-04 COMPLIANCE
CIS Hardening Linux / Python

🐧 Linux Security Validator

Automated scripts for security auditing, CIS baseline compliance validation, file permission anomaly detection, and kernel parameter enforcement across Linux servers and developer workstations.

> System audit against CIS Linux benchmarks
> SUID/SGID executable discovery & anomaly alerts
> Automated remediation checklist generation
REPO ↗
PRJ-05 COMMUNITY
Typst / Polylux GDG Speaker

🎨 GDG Typst Presentation Theme & Talks

Modular presentation deck theme designed for Typst using Polylux, inspired by Google Developer Groups visual identity, accompanied by technical talk materials including Quantum Computing Fundamentals.

> Modern programmatic typesetting with Typst
> High-contrast slides for technical architecture talks
> Includes Quantum Computing fundamentals material
REPO ↗
[SECTION 06]

ACADEMIC TRAJECTORY & CERTIFICATIONS

CERT
CERTIFICATION CompTIA

CompTIA Security+ ce Certification

Globally recognized credential validating foundational and operational cybersecurity proficiency: network architecture security, threat analysis, incident response, cryptographic controls, and risk governance.

PÓS
POSTGRADUATE Universidade Tecnológica Federal do Paraná (UTFPR)

Postgraduate Specialization in Artificial Intelligence

Specialized research and development in machine learning paradigms, deep neural architectures, heuristic optimization, and automated decision-making models.

ENG
BACHELOR OF SCIENCE Faculdade Pitágoras

B.S. in Electrical and Electronic Engineering

Comprehensive engineering foundation: circuit analysis, analog/digital signal processing, embedded systems, microcontrollers, control theory, and hardware-level computer architecture.

DOC
ACADEMIA & TEACHING Higher Education Institution

Former University Professor (4+ Years)

Taught undergraduate courses in Information Security, Algorithms and Data Structures, Analog and Digital Electronics, and Embedded Microcontrollers. Mentored future engineers in algorithmic thinking and secure systems design.

[SECTION 07]

TRANSMISSION CHANNELS // CONNECT

[SECURE COMMUNICATION CHANNELS]

Establish Connection with Security Architect

Available for technical dialogues on enterprise defense architecture, AI agent safety research, threat modeling workshops, and community speaking engagements.

PROFESSIONAL NETWORK linkedin.com/in/dandga
SOURCE REPOSITORIES github.com/dandgabr
GEOLOCATION: Londrina, Paraná — Brazil (UTC-3)
POLICY: Zero spam, direct professional communication via LinkedIn/GitHub only.