Pedro Rodiguero
Security Engineer · Brasília, Brazil
Summary
Security engineer at LOQED Systems, an Israeli endpoint-security company. I work where detection meets software: pipelines that turn raw telemetry into signals an analyst can defend, recon tooling that maps what a company exposes, and the investigations that sit on top of both. Open to remote contract and full-time work with US teams.
Experience
- Security monitoring, incident analysis and forensic investigations for enterprise clients, with every finding backed by reproducible query evidence.
- Building the detection side of the product: insider-risk analytics, external exposure monitoring and internal tooling for the support and SOC teams.
- Backend development on production client systems, including fixing security issues found in existing code.
- Test-driven development, unit testing and QA on Vue.js and Java web applications used across the federal audit body.
- Invited to stay on after graduation.
Selected projects
An 11-stage pipeline, read-only against production, that builds per-person baselines and deviations in plain SQL. A language model only narrates and labels; it never produces a score. A local overlay fills gaps in a classification catalogue owned by another team, without modifying it.
Outcome: Exposed a metric that looked like 20% personal browsing but was almost entirely legitimate work tools. Every signal now ships with its definition and limits, and none feeds a decision until it is validated against a hand-checked calibration set.
A dependency-free Python service that aggregates existing intelligence feeds into one severity-ranked view per client, with no active crawling of Tor and no third-party packages to audit.
Outcome: A working prototype that answers one question at a glance: is something about this client showing up outside, and how bad is it?
Four daily puzzle games: guess the CVE from its attributes, group alerts into attack types, judge phishing emails, and spot the malware name. Fully client-side, with every day's puzzle derived deterministically from the date.
Outcome: Live at breachle.app, with streaks, an archive and share cards. The source is public.
Read-only discovery separated from installation. Candidates are quarantined, checked for provenance, license and suspicious structure, and never executed during review. Only exact allowlisted sources install automatically; everything else needs explicit approval for a specific commit.
Outcome: A single shared skill store for three different agents, where every installed capability has a recorded source, commit and hash.
Kali Linux on a Hyper-V host with a scripted display and RDP fix, Burp Suite that starts headless with its REST API and extensions loaded, and access locked to a single workstation by firewall rules.
Outcome: Rebuilding the lab after a failure takes minutes. The display issue became the first write-up on this site.
Skills
SQL Server · DuckDB · Python · Django · UEBA
Burp Suite · Kali Linux · OSINT · SPF/DMARC · Hyper-V
Go · TypeScript · Python · AWS · Cloudflare Workers