INCIDENT RESPONSE
Incident response
Process design, documentation, triage, investigation and significant response-time improvement.
Loading the office…
CASSIO NAKAGAWA
whoami
cassio.nakagawa :: security-consultant / soc / csirt / incident-responseCybersecurity.
SOC. Response.
Information security consultant with experience in SOC, CSIRT, incident response, governance, networking and automation.
SOC OPERATIONS
SOC L1 / L2
Hands-on work with Microsoft Sentinel, Splunk, QRadar, CrowdStrike and Microsoft Defender.
SECURITY ENGINEERING
Implementation and improvement
Support for SOC implementations, detection engineering, rule tuning and hybrid operations.
GOVERNANCE & IT
Governance and technical base
Earlier experience in IT management, ISO 27001, ISO 20000, networking, servers and operational support.
LATEST
Recent projects and posts
Project
This website
Project
FreExam Player
PROFILE
Professional profile
Security consultant with background in CSIRT, SOC, incident response, networking, governance and IT operations.
Summary
Cassio Nakagawa
Security consultant with background in CSIRT, SOC, incident response, networking, governance and IT operations.
BaseSindelfingen, Baden-Württemberg, Germany
LanguagesPortuguese - nativeEnglish - advanced (C1)German - beginner
FocusSOC operations, incident response, CSIRT, detection engineering
Security consulting
Current role as Senior Information Security Consultant focused on SOC, triage, response and continuous improvement.
CSIRT and pentest support
Experience in CSIRT implementation, pentest support, malware analysis, phishing, vulnerabilities and evidence gathering.
Highlights
SOC L1/L2, CSIRT, incident response, threat handling, governance, networking and awareness.
Key tools
Microsoft Sentinel, Splunk, QRadar, CrowdStrike Falcon, Microsoft Defender, XDR, Fortigate, Power Automate.
Strong IT and governance base
More than a decade in IT management, networks, servers, awareness, LGPD and standards such as ISO 27001/27002 and ITIL.
CAREER
Experience
A concise view of the main stages of my career and the results delivered in security operations.
TCS | 04/2024 - 04/2026
SOC / ConsultingSenior Information Security Consultant
SOC operations as a hybrid Level 1 and Level 2 analyst with triage, investigations, awareness, tuning and detection improvement.
CAPGEMINI | 2022 - 2024
CSIRT / IRInformation Security Consultant
CSIRT implementation, SOC support, incident response, phishing and malware analysis, vulnerability handling and technical coordination.
PILZ | 2012 - 2022
IT / GovernanceIT Analyst
IT management, networking, devices, Windows servers, governance, security operations, user support and training.
EDUCATION
Education and credentials
Academic background, certifications and languages that support my professional work.
Academic background
Bachelor-level degree in Cyber Defense from FIAP, graduated in January 2022.
Languages
Brazilian Portuguese native, English advanced C1 and German beginner level.
Certifications
BTL1, SC-200, ISC2 CC, AWS Cloud Practitioner, GCP Security Engineer, GCP Network Engineer, ServiceNow CSA and more.
Microsoft
SC-200SC-900AI FundamentalsAZ Fundamentals
Google Cloud
Professional Cloud Security EngineerProfessional Cloud Network EngineerWorkspace Administrator
ServiceNow
Certified System AdministratorImplementation Specialist - Incident Response
Security / Cloud
BTL1ISC2 Certified in CybersecurityAWS Cloud Practitioner
WALL
Projects & posts
What I am building and what I am writing about, newest first.
AI LAB
My agents, live
Each project has a PM that never leaves, plus specialists who join and leave as work comes in. Observation only: nothing here controls any infrastructure.
Reports and decisions
0 0 owner actions need your reply
No owner actions are waiting.
No daily reports are published yet.
No report or decision for this office yet.
Kanban
What the agents are working on right now. Counts and status only: no task names, no details.
ProjectActivePinnedChecking AI office…
FreExam Player
Practice exams that run entirely in the browser. Bring a JSON exam file and get a timed exam mode, a practice mode with explanations, scoring and a review of your weakest areas. No account, no upload, no server.
ProjectActiveChecking AI office…
This website
Personal site and browser security toolkit, built as static pages with Astro and deployed to AWS S3 through GitHub Actions with separate dev and production environments.
The crew
Who works here, what each one does and how. Pick a character to read its sheet. Observation only: nothing on this page controls any infrastructure.
How a piece of work travels
- 1. You askA request reaches Xamiku, the assistant, who works out which project it belongs to.
- 2. The manager plansThe project's manager splits the work into small tasks and calls only the roles it needs.
- 3. Specialists joinA builder, researcher, tester or reviewer takes one task, hands back evidence and leaves.
- 4. The writer reportsEvery evening a report writer turns the day into a report you can open in the project's office.
ProjectActivePinned
FreExam Player
Practice exams that run entirely in the browser. Bring a JSON exam file and get a timed exam mode, a practice mode with explanations, scoring and a review of your weakest areas. No account, no upload, no server.
ProjectActive
This website
Personal site and browser security toolkit, built as static pages with Astro and deployed to AWS S3 through GitHub Actions with separate dev and production environments.
Nothing matches this filter.
PERSONAL SIDE
Hobbies
Personal interests that help balance discipline, curiosity and consistency outside work.
Technology and labs
Exploring tools, test environments, automations and hands-on studies related to security and infrastructure.
Continuous learning
Ongoing study of new technologies, certifications, languages and best practices that strengthen my professional growth.
Routine and discipline
Interest in organization, continuous improvement and personal routines that value focus, consistency and clarity.
TOOLKIT
Personal toolkit
Local tools I keep available for testing, analysis and technical support in the browser.
Select a tool above to view its details.
CONTACT
Contact
Professional information for networking, collaboration and opportunities.
Professional contact
cassio.nakagawa@gmail.com | Sindelfingen, Baden-Württemberg, Germany.
Open LinkedInProfessional summary
Cybersecurity consultant focused on SOC, incident response, CSIRT, detection engineering and security operations.
View profile