Heartlin MacHado
Senior Software Engineer @Phosphorus Cybersecurity Inc
Signup · Get unlimited contacts
WORK HISTORY
Senior Software Engineer @Phosphorus Cybersecurity Inc
Nashville, TN, US
Architected and deployed Microsoft Sentinel Integration with automated incident response playbooks, enabling threat detection and response across the IoT/OT security platform serving enterprise customers- Built, deployed, and maintained end-to-end ServiceNow OT integrations (CMDB, ITSM, Vulnerability Response) — complex integrations typically requiring 10+ years of ServiceNow development experience- Led remediation of all WAPT (pentest) findings (IncludeSec): privilege escalation, SSRF, CSRF, command injection, secrets exposure, path traversal. Built SIEM and DDI integrations (Infoblox, Bluecat), cybersecurity platform integrations (Qualys, CyberArk, Microsoft ADCS, Venafi) for asset discovery, certificate management, and vulnerability scanning- Built SMTP service with secure credential storage and multi-format support, plus custom report generation system with scheduled execution and delivery tracking. TypeScript backend with DI architecture.
EDUCATION
Northeastern University
Master of Science - MS, Computer Science
ABOUT HEARTLIN MACHADO
Senior Software Engineer building security infrastructure that makes the unsafe path technically unreachable.What I doAt Phosphorus Cybersecurity, I build enterprise security products: Microsoft Sentinel integrations with automated incident response playbooks, end-to-end ServiceNow OT integrations (CMDB, ITSM, VR), SIEM integrations (IBM QRadar, Fortinet FortiSIEM), and cybersecurity platform connectors (Qualys, CyberArk, Microsoft ADCS, Venafi, HashiCorp Vault, BeyondTrust). I led remediation of all WAPT findings from IncludeSec across privilege escalation, SSRF, CSRF, command injection, secrets exposure, and path traversal.What I\'m buildingAs Co-Founder of BlockIntel, I built Gate — a pre-signature policy enforcement layer for digital asset custody. Gate intercepts signing operations at the KMS/HSM boundary, enforces deterministic policy before key invocation, and generates three-layer cryptographic receipts (HMAC + hash chain + RSA-SHA256) that are independently verifiable without vendor cooperation.Production: 7,385+ policy decisions, 17.1% would-block rate, 99.62% receipt coverage, on-chain Merkle anchors on Base. Built AI/ML risk recommendation systems for insurance underwriters. 5+ active carrier/broker conversations. Receipt chain mapped to VARA Rulebook v2.0 and NYDFS BitLicense requirements.The thesisMost crypto security is reactive — alerts trigger after execution, when funds are already gone. Gate shifts enforcement to the last reversible boundary: before the signature is produced. No verdict = no signature.StackPython, TypeScript, AWS (KMS, IAM, ECS, Lambda, DynamoDB), Microsoft Sentinel, IBM QRadar, Fortinet FortiSIEM, Qualys, CyberArk, Venafi, HashiCorp Vault, PostgreSQL, MongoDB, Redis, Docker, Terraform, ServiceNowWritingmedium.com/blockintelheartlinmachado.com | blockintelai.com
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.