Nuno Povoa

Cybersecurity Management Professional | Houston, TX

Houston, TX

About Me

A seasoned cybersecurity leader with a career spanning over 15 years, I bring to the table a wealth of expertise in information security management and business resiliency. My strength lies in bridging the gap between disparate groups and crafting strategic plans grounded in pragmatic decision-making. I have a proven track record of delivering tactical and strategic solutions to complex security challenges, backed by exceptional analytical, communication, and technical skills.

Core Competencies

Team Leadership and Management
Compliance Frameworks
Incident Management
Penetration Testing
Vulnerability Management Life Cycle
SIEM, IDS, IPS, Log Technologies
Purple Team Exercises
Industrial Control Systems PCN/SCADA
Medical Devices & Consumer IoT
Methodology Development

Certifications and Training

Offensive Security Certified Professional (OSCP), Offensive Security
ICS Cyber Security 301, US-CERT
AWS Technical Professional, Amazon
Security+, CompTIA
BOSIET 5700 (Offshore Safety and Emergency), OPITO

Education

IT Management (2005 - 2007), Universidade Lusofona de Technologies e Humanidades, Lisbon, Portugal
Homeland Security and Cyber Security (2018), State University of New York (Online)

Experience

Mitsui USA, NY, NY (Contract Position)

Senior Consultant (2022 - 2023)

In my role as a Senior Consultant, I spearheaded the project management of annual security conferences, engaged with Group affiliates across the Americas regarding their current security efforts. I was instrumental in generating metrics and dashboards for internal vulnerability management, managing third-party security vendors, and leading recurrent security briefs with senior management. I also played a key role in incident response efforts, and policy development.

AIG, Houston, TX (Contract Position)

Sr Penetration Tester (2022 - 2022)

During my 4-month tenure at AIG, I was instrumental in aiding the internal penetration testing efforts. My role primarily involved penetrating internal networks and systems. I also had the opportunity to work on hardware hacking with physical devices designed for secure remote access.

Eurofins Cyber US, Lancaster, PA (Remote)

Security Architect & Team Lead (2018 - 2021)

As a Security Architect and Team Lead, I was responsible for developing Penetration Testing, Vulnerability Assessment, and Red/Purple Team service offerings. I also played a pivotal role in the design and implementation of the Incident Response program and led the deployment of Cylance Optics & Protect in response to an enterprise breach.

Lockheed Martin, Bethesda, MD (Remote)

ICS Security Principal Consultant (2016 - 2018)

As an ICS Security Principal Consultant, I performed security assessments and penetration tests focusing on ICS and IIOT environments for a Fortune 5 oil & gas client. I also supported the sales team in pre-sales as an SME in assessment, testing, and transformation proposals in the Oil & Gas, Energy, and Semiconductor sectors.

KPMG, Dallas, TX (Remote)

Senior Associate - Business Continuity and Information Resilience (Apr 2015 – Mar 2016)

In my role at KPMG, I performed security assessments and penetration tests for clients in the energy and financial sectors. I focused on Industrial Control Systems (ICS) and SCADA environments, traversing corporate networks, and advised clients on best practices to mitigate security issues.

Other Experience

Houston Internship Project

Cyber Security Program Director (Dec 2018 - 2020)

I established a Cyber Security Internship Program, The Houston Internship Project (HIP), a non-profit consortium focused on placing local students into local internship opportunities for the summer, upon completion of their Junior Year. The goal was to accelerate local graduates being recruited and potentially hired within our vast number of Houston employers.