← Home

Mateus Reis Bastos

IT Infrastructure Intern · Blue Team, SOC and cybersecurity · Network Engineering — UnB

Brasília, Federal District, BrazilInformation Security Internship, focusing on defensive security, monitoring, and network/infrastructure security

Profile

Communication Network Engineering student at the University of Brasília, focused on information security, cyber defense, and infrastructure. Building hands-on experience in threat monitoring, access control, and observability, combining a defensive SOC perspective with CTF practice and offensive-security studies.

Currently working as an IT Infrastructure Intern at Associação GigaCandanga, Teaching Assistant in Advanced Topics in Computers, and part of the management team at UnBreakable, UnB's offensive-security study group.

Professional experience

IT Infrastructure Intern

Associação GigaCandanga · Mar 2026 – present · Brasília, Brazil · hybrid

GigaCandanga is a Science and Technology Institution (ICT) responsible for managing Redecomep, the metropolitan education and research network of Brazil's Federal District.

  • Conducted proof-of-concept (PoC) implementations in a lab environment with Wazuh (SIEM), Suricata (IDS/IPS), and OpenVAS (vulnerability management) for Linux server security monitoring, with production rollout planned for future project phases.
  • Configured and validated JumpServer (PAM) as a Bastion Host in a test environment, centralizing SSH access to Linux servers, enabling session auditing, and reducing direct credential exposure.
  • Administered Linux systems and operated Zabbix and Grafana for high-capacity network observability.

Technologies: Wazuh · Suricata · OpenVAS · Docker · Docker Compose · Linux · JumpServer · Zabbix · Grafana · TCP/IP · DNS · Firewall · Python

SOC Intern

Associação GigaCandanga · Nov 2025 – Mar 2026 · Brasília, Brazil · hybrid

Participated in the initial structuring stage of a multi-tenant SOC-as-a-Service project.

  • Participated in the project's initial structuring stage through the study and review of technical proposals and documentation.
  • Researched public threat intelligence (IOC) feeds as input for future integration with detection tools.
  • Developed the project's technical glossary, covering threat concepts, monitoring tools (SIEM/IDS/IPS/SOAR), network protocols, and multi-tenant architecture.

Technologies: Wazuh · Threat Intelligence (IOCs) · Networks & Protocols

Education

Bachelor's Degree in Communication Network Engineering

University of Brasília (UnB) · Mar 2024 – Mar 2029 (Expected graduation)

Multidisciplinary curriculum in Network Engineering, Telecommunications, and Computing.

Teaching Assistant — Advanced Topics in Computers

University of Brasília (UnB) · Aug 2026 – present

Supporting students in developing hands-on skills for offensive-security challenges and CTF (Capture The Flag) competitions.

Extracurricular activities

Management team member — UnBreakable

UnB offensive-security study group · Mar 2026 – present

  • Management team member; structured and conducted the 2026 recruitment process featuring two weeks of hands-on lectures and elimination challenges, requiring a technical write-up as the final evaluation (29 accepted).
  • Recon Track Instructor: conducted weekly hands-on TryHackMe labs covering enumeration, exploitation, initial access, and privilege escalation on Linux and Windows, authoring 7 technical write-ups.

Member — IEEE ComSoc UnB

IEEE Communications Society student chapter · May 2025 – Mar 2026

Participated in communication and networking projects and events; volunteer at the IEEE ComSoc Student Leadership Tech Conference Centro-Norte Brasil (Oct 2025).

Courses & certifications

Courses and certifications, issuing organizations, and current status
Course or certificationIssuerStatus
Junior Cybersecurity AnalystHack The BoxIn progress
Google Cybersecurity Professional CertificateGoogle / Coursera2025 · credential FO6HJLJQ9NYU
EF SET English — 70/100 (C1 Proficient)EF SETCompleted
Networking BasicsCisco Networking Academy2025
Python 3Curso em Vídeo2024

Technical skills

Security / Detection: Wazuh, Suricata, OpenVAS, Linux Hardening, SCA

Offensive Security: Nmap, Gobuster, OSINT, Shodan, Google Dorks, Privilege Escalation

Infrastructure: Linux, Docker, Docker Compose, JumpServer

Monitoring: Zabbix, Grafana

Networking: TCP/IP, DNS, SSH, Firewalls

Programming / Automation: Python

Languages: Portuguese (Native) · English (Advanced / C1 - EF SET 70/100, Proficient)