João Dias, Cybersecurity & Network Specialist

SOC analyst in Lisbon. I triage security alerts for national critical infrastructure.

  • Security
  • Networking
  • AI
  • Cloud

About

About

I work in a security operations center. I triage alerts and escalate the real incidents, within strict response times.

Before that I built the other side: Active Directory, firewalls, VPNs and endpoint management. I learned it in a two-year cybersecurity specialization and finished with 18/20.

I automate repeated work with Python, PowerShell and AI agents.

Based in
Lisbon, Portugal
Certified
CompTIA Security+ and A+
Specialization
CET Cybersecurity, 18/20
Languages
Portuguese, English, Spanish, French

Projects

Projects

Enterprise endpoint management

Chose, designed and deployed a central endpoint management platform joined to Active Directory.

Active DirectoryPatch managementArchitecture
How I built it: Enterprise endpoint management
  • Evaluated endpoint management solutions and wrote a comparison with a recommendation.
  • Designed the high-level and low-level architecture, integrated with the AD domain.
  • Deployed software distribution, patch management and system monitoring modules.

Network infrastructure design

Segmented network with a DMZ, pfSense firewalls and site-to-site VPN.

pfSenseVLANDMZIPsecOpenVPN
How I built it: Network infrastructure design
  • Designed VLAN segmentation, DMZ architecture and access control policies.
  • Configured pfSense firewalls with NAT/PAT and port rules.
  • Documented site-to-site VPNs (IPsec and OpenVPN), network diagrams and procedures.

High-availability infrastructure

Active Directory with redundant domain controllers, a GPO baseline and DPM backups.

Active DirectoryGPODPMRedundancy
How I built it: High-availability infrastructure
  • Built an AD domain with redundant domain controllers.
  • Defined Group Policy Objects for the organization's configuration baseline.
  • Assessed backup options and implemented Data Protection Manager (DPM).

Multi-threaded data app

Python application that validates and processes data in parallel, stress-tested and documented.

PythonConcurrencyTesting
How I built it: Multi-threaded data app
  • Built a multi-threaded Python application with data validation and processing.
  • Ran stress tests and edge-case tests, and documented performance.
  • Aligned the design with compliance requirements and recorded architecture decisions.

Timeline

Timeline

  1. May 2026 — Now

    SOC Analyst L1

    SIBS Multicert (SIBS Group)

    • Monitor and analyze security alerts in a SIEM to triage threats across large-scale critical infrastructure.
    • Support incident response and escalation for a national public-safety network.
    • Work under strict confidentiality and SLA-driven response times.
    SIEMIncident triageEscalationSLA
  2. Mar 2024 — Jul 2026

    Technological Specialization in Cybersecurity (CET, Level 5)

    ATEC · Final grade 18/20

  3. May 2025

    CompTIA Security+

    CompTIA · Certified

  4. Dec 2024

    CompTIA A+

    CompTIA · Certified

Skills

Skills

Monitoring & Security

SIEMPhishing analysisOSINTThreat Hunting

Networking

CiscoCheck PointpfSenseTCP/IPDNSDHCPVPN

Infrastructure

Windows ServerLinuxActive DirectoryGPO

Automation

AI agentsn8nMCPCI/CDIaC

Cloud & Virtualization

AzureDockerVMware

Scripting

PythonPowerShellBashSQL
Knowledge level
CCNA, AZ-900
Compliance training
ISO 27001 · ISO 9001 · GDPR · NIS2
Languages
Portuguese (native) · English (full proficiency) · Spanish (professional) · French (limited)

Contact

Contact

Email or LinkedIn. Both reach me.

LinkedIn