Transitioning into Cybersecurity | Public Law Attorney — Security, Forensics & GRC

I am a career-transition professional moving from 20 years of legal practice — specializing in Public Law — into cybersecurity. What I bring to the field is a foundation that most junior candidates simply cannot replicate: structured legal reasoning, deep knowledge of regulatory and compliance frameworks, evidence-handling discipline forged in practice, and two decades of managing sensitive data under strict legal obligations.

Public law practice demands rigorous documentation standards, a thorough understanding of institutional risk, and the ability to navigate complex regulatory environments — competencies that map directly onto Governance, Risk & Compliance (GRC), Digital Forensics & Incident Response (DFIR), and Security Operations. Whether interpreting LGPD/GDPR compliance requirements, applying chain-of-custody procedures, or identifying systemic risk across a portfolio of 20,000+ clients, the analytical discipline was always the same.

To formalize this transition, I earned a Postgraduate degree in Digital Security (10.0/10.0 — PUCRS), hold CompTIA Security+, CompTIA Network+ and CompTIA Cybersecurity Analyst+ certifications. I am also enrolled in a Cybersecurity Risk Management diploma with Co-op at CCTB (Vancouver), which bridges my legal and analytical background with hands-on technical training.

Hands-on Lab & Training Focus

Through structured lab environments and self-directed practice, I am actively building technical depth in:

• SIEM & Log Analysis: Splunk (TryHackMe, HTB labs), alert triage workflows, log correlation.
• Network Analysis: Wireshark pcap analysis, traffic pattern recognition, Nmap reconnaissance.
• Scripting & Automation: Python scripting for data extraction and workflow automation — a genuine strength from years of development work on production Django applications.
• Frameworks: NIST CSF, OWASP Top 10, ICP-Brasil PKI (deep expertise), LGPD/GDPR compliance.

What I Bring to a Security Team

I am targeting roles where professional maturity, regulatory literacy, and analytical rigor are valued alongside technical skills — including SOC Analyst, GRC Analyst, and Digital Forensics Analyst positions. My public law background provides a natural bridge to roles involving compliance audits, incident documentation, legal hold procedures, and evidence chain-of-custody — areas where legal and technical expertise intersect directly.

The technical depth is being built deliberately and will continue growing on the job. I am based in Vancouver, BC, and available to relocate to any city in Canada immediately if the opportunity requires it. Reach out via Email or connect on LinkedIn.