Eduardo Pessota

About Eduardo Pessota

I help organizations understand exactly what attackers see — and prove it through real-world exploitation. With 15 years in offensive security, I\'ve led red team operations, built attack surface management programs from the ground up, and discovered zero-day vulnerabilities recognized by IBM and BMC. My work spans penetration testing across web applications, network infrastructure, ATMs, and transactional systems — always connecting technical findings to business risk. At TecBan, I led the offensive security, threat intelligence, and forensics team responsible for the largest ATM network in Brazil (Banco24Horas), reducing the internal and external attack surface by nearly 90% through a continuous vulnerability management program. At Experian, I lead real-world attack validation efforts against externally exposed assets, designing and automating offensive workflows that scale across a global attack surface — and translating findings into executive-level narratives that drive remediation and long-term security improvement. What sets me apart: CVE discovery & public recognition from IBM and BMCOSCP certified, with hands-on expertise in adversary simulation and exploitationProven ability to bridge the gap between red team findings and business decision-makingExperience across financial services, telecom, oil & gas, pharma, and critical infrastructure

Experience

1. Senior Attack Surface Management Engineer

   Experian

   May 2024 — Present

   Leading real-world attack validation and exploitation efforts for externally exposed assets, simulating adversary behavior to confirm exploitability, impact, and business risk.Partner closely with engineering and business teams to translate attack scenarios into clear remediation priorities and risk reduction.Operate and evolve the Attack Surface Management program with a strong focus on quality, attacker paths, and reduction of noise from automated findings.Design and automate offensive security workflows and validation pipelines to support continuous attack surface discovery, exploitation, and reporting at scale.Produce high-fidelity reports and executive narratives connecting offensive findings to detection, response, and long-term security improvements.

Education

• FIAP

  MBA, Cybersecurity - Forensics, Ethical Hacking & DevSecOps

  2019 — 2020

• Universidade Paulista

  Bachelor's degree, Computer Science

  2007 — 2011