Segurança de Código Além do SAST: Como Falhas Exploráveis Passam Despercebidas?
teste
Information security specialist · Speaker · Researcher · Brazil
Alyce
Suza
Information Security Specialist
Security is not a feature, it is a foundation. Today I devote my career to Security by Design, AppSec and governance, and I share that path as a speaker, mentor, content creator and cybersecurity researcher.
about
Who I am
I am Alyce Suza, a computer engineer and information security specialist. I work with Security by Design, threat modeling, AppSec and end to end security governance, combining hands on technical practice with strategic vision.
I am also a scientist and researcher in cybersecurity: a master's student in Computer Science, with a research line in Information Security Management Systems (ISMS), always looking for new knowledge and growth.
I serve on technical committees of ABNT and ISO, contributing to the development and review of global standards for cybersecurity, governance, quality and risk management. It is work that strengthens industry practice and keeps technology aligned with international security standards.
Beyond the technical work, I am Regional Director of ABRASECI in Goiás, a speaker, a cybersecurity content creator and one of the organizers of Porteira Tech. I also mentor people who want to enter or grow in the field, volunteer in several initiatives and stay active in technology communities, because I believe security and knowledge need to be shared.
If you want to talk about security, community or research, get in touch.
Information Security Specialist
Security by Design · AppSec · Governance
Threat modeling, SAST/DAST/IAST, multi-cloud security and data governance, from requirement to delivery.
Scientific Research
Scientist and researcher
Master's student in Computer Science at UFG, researching Information Security Management Systems (ISMS) and ontologies applied to ISO/IEC 27001.
Teaching
Cybersecurity Lecturer
Undergraduate courses in Cybersecurity, Cybersecurity Governance and Cybersecurity Risk Management.
Talks & Content
Speaker and content creator
I share cybersecurity knowledge at events, workshops, interviews and on social media.
Mentoring
Cybersecurity career
I guide people entering the field and those growing within it, focused on career direction, study and first practical steps.
Porteira Tech
Organizer
One of the organizers of the Porteira Tech community, focused on representation and training in technology.
ABRASECI Goiás
Regional Director
Regional leadership of the Brazilian Cybersecurity Association in Goiás, 2025 to 2029 term, strengthening the security community in the state.
ISO and ABNT
Technical committee member
Development and review of global standards for cybersecurity, governance, quality and risk management, aligning industry practice with international standards.
Education
Master's student in Computer Science (Information Security) at UFG · Postgraduate in Information Security · Computer Engineering
Certifications
Ethical Hacking Exploit Development (EHXD), Ethical Hacking Memory Corruption (EHMEC) e EHE · ISO/IEC 27701:2025 Lead Auditor · EXIN AI Foundation · DevSecOps (IBSEC)
Recognition
TOP10 of TOP20 Women to Follow (Daryus) · Legislative Merit, Legislative Assembly of Goiás · Honor of Merit, City Council of Goiânia
Standards committees
ABNT: Information Security and IT Governance · ISO: Quality (TC 176), Information Integrity (TC 171/SC 1) and Risk Management (TC 262)
contact
Let's talk
Speaking invitations, collaborations, community or just a hello.
talks & workshops
Where I speak
Talks, workshops, panels and interviews on cybersecurity, career and representation in technology.
Vozes Negras Femininas que Fizeram Parte Desta História
Porteira 443
Meetup de Segurança da Informação
Desmistificando a Área de Cibersegurança: Como Funciona e Como Entrar Neste Mundo do Hacking
Desvendando os Paradigmas da Área: O que é e Como Entrar Neste Tal Mundo Hacking?
Mitos e Verdades sobre Cibersegurança
Fique Longe de Problemas: Práticas de Prevenção de Risco Cibernético
Ada Lovelace Day
"Pode me Hackear, não Tenho Nada a Perder!"
Cyber Security para Você Ficar Seguro no Mundo Digital
Cibersegurança: Mitos e Verdades sobre Hacking
Hacker Cute
Golpe Phishing e Profissão Pentest
Phishing: Como Funciona?
Acessibilidade na Web
Conscientização e Análise de Riscos em S.I.
projetos
What I build
Tools, training and applied research, mostly in accessible security and education.
SUZA
Plataforma gamificada de security awareness, conscientização em segurança de um jeito envolvente.
Guardrail Security Mentor
Treinamento gamificado de Security by Design e LGPD, com simulador de custo de incidentes.
Eu, Robô e o Hacker
Simulador educativo sobre o OWASP LLM Top 10, segurança de IA de forma acessível.
Guia de Acessibilidade para Aplicações Web
Estudo de padrões de navegabilidade e acessibilidade em sites reais, com guia prático e protótipos para tornar aplicações web mais inclusivas.
Jogo Didático com Tecnologia Assistiva
Pesquisa sobre a viabilidade de um jogo didático de química apoiado por Tecnologia Assistiva (TA) para alunos com desenvolvimento atípico.
academic publications
What I research
Scientific articles, chapters, books and academic output.
Transparência e Explicabilidade da IA (XAI) no Trabalho: a Necessidade de Compreender Como Algoritmos Tomam Decisões que Afetam Salários, Promoções e Demissões
Capítulo em: O Futuro do Trabalho e a Ética da Inteligência Artificial, Publique-se
Ontologias OWL 2 para Consistência da Declaração de Aplicabilidade (SoA) na ISO/IEC 27001
Pesquisa de mestrado em andamento, Ciência da Computação, UFG
Fortaleza Digital
Livro / material educacional em cibersegurança
writing & opinion
What I think
Writing, posts and opinion on security, career and community. I publish most often in my LinkedIn newsletter.
Nothing here yet.