Gabriel Tavares

Cyber Security Engineer

Summary

Dynamic and dedicated Cybersecurity enthusiast with a recent diploma from McGill University, completed with the help of years of self-directed learning and exploration in the field. My journey in Cybersecurity began long before formal education, through reading documentation, trial and error, dedication and driven by a deep passion for understanding the intricacies of information security, ethical hacking, and digital forensics. This self-motivated quest for knowledge led me to pursue and achieve a formal qualification from one of Canada’s premier institutions.

Technical Knowledge

Operating Systems

Linux (Arch, Manjaro, RedHat, Kali Linux, Parrot OS, BlackArch, Whonix, Qubes OS, Tails), Windows, MacOS

Monitoring Tools

Splunk, Wireshark, Auvik

Testing Tools

SonarQube, Synk, Burp suite, ZAP

Pen-Testing Tools

Metasploit, msfvenom, nmap, aircrack-ng, SQLmap, John the Ripper, Gophish, SEtoolkit, Mimikatz

Infrastructure

Docker, LCX/LXD (Linux Container Daemon), VMWare

Cloud

Amazon Web Services

Lambda, EC2, VPC, S3, Route53, Cloudfront, Workspaces, Directory Service

Services

Active Directory, LDAP, Apache, nginx, haproxy, dhcpd

Coding

Bash, Python, React, Groovy, SQL, Solidity

Education

McGill University

January 2020 - December 2022

Applied Cybersecurity

Experience

Plusgrade

June 2024 - Present

plusgrade.com

Cyber Security Engineer

  • Analyze code repositories for vulnerabilities and patch the bugs.
  • Research and communicate updates on the latest cybersecurity threats.
  • Distribute and track completion of security awareness training for engineering teams.
  • Monitor Google Workspace for suspicious activity, enforce security policies, and resolve incidents.
  • Implement and maintain security best practices in AWS, including IAM policy management and compliance monitoring.

Plusgrade

February 2022 - June 2024

plusgrade.com

Integrator - DSE Seating Team

  • Lead multiple feature launches for partners (Spirit Airlines, Egyptair, Air Astana, etc).
  • Deploy numerous new features for partners.
  • Update upgrade pricing and business rules in the database.
  • Building partner emails using groovy.
  • Update partner configurations and front-end styling via JSON files.
  • Grooming Jira board to prioritize or clean up tickets.
  • Built bash/python scripts that are used by other ACT members to help with daily tasks (uploading textkeys, debugging partner-tool, passenger email blacklisting, etc).

Tavares Consulting

July 2019 - April 2021

Cyber Security Consultant

  • Risk Assessment: Conducted thorough cybersecurity assessments to identify vulnerabilities within the business’s network, systems, and practices. This includes checking for outdated software, assessing the risk of data breaches, and providing recommendations to mitigate identified risks.
  • Secure Office Networks: Configure the office’s network infrastructure with security best practices, including secure Wi-Fi configurations, VLANs for segmenting network traffic, and VPN access for remote employees to ensure secure communications.
  • Firewall and Antivirus: Set up and configured firewall solutions to protect the network’s perimeter and install reputable antivirus software on all devices to guard against malware and other malicious threats.
  • Active Directory: Set up and manage Active Directory for managing user accounts and groups, implementing group policies for security settings, and ensuring only authorized users have access to sensitive information and critical systems.
  • Backup and Recovery: Implemented automated backup solutions for critical data and a recovery plan that outlines procedures for data restoration and continuity of operations in the event of a data loss or cyberattack.
  • Employee Security Training: Developed and delivered security awareness training for employees, focusing on recognizing phishing attempts, safe internet practices, and the importance of strong password policies.
  • 2FA: Set up two-factor authentication for accessing critical systems and sensitive data, adding an extra layer of security beyond just passwords.

EM Custom Design

November 2020 - Present

emcustom.design

Freelance Software Developer

  • Developing websites for small businesses, landing pages, portfolios, e-commerce and service booking.
  • Android/iOS apps to order products or book service appointments
  • Internal web apps so business owners can monitor their inventory, sales, customer support tickets, etc.

Apple Canada Inc.

November 2011 - July 2019

apple.com

Sales Expert

  • Leader in sales, product knowledge, and offering business solutions to customers.
  • First to learn, inspire and coach my fellow colleagues when new products and initiatives emerged.
  • Responsible for developing strong and long-lasting relationships with business customers.
  • Fast paced customer support (hardware, software, troubleshooting)

Licenses & Certifications

Red Hat Certified System Administrator

Apple Canada Inc.

Issued June 2015 - No expiry

Certified Macintosh Technician (ACMT)