Marcelo Lima is a seasoned systems engineer with 12 years of experience delivering security solutions and technical enablement for global service providers and MSSP partners, currently focused on Palo Alto Networks' GSI accounts. He blends pre-sales consulting, onsite and remote demos, and go-to-market support with deep hands-on offensive security expertise evidenced by significant contributions to high-profile open-source tools like CrackMapExec and SILENTTRINITY. Comfortable across cloud, network, and endpoint security, Marcelo also automates red-team infrastructure and builds backend tooling (Python, C#, Nim) for post-exploitation and reconnaissance workflows. His background in training and channel enablement underscores a talent for translating complex technical concepts into practical, deployable solutions. Based in Tampa, he pairs enterprise sales engineering with an unconventional hacker’s mindset—often weaponizing niche languages and tooling to stress-test defenses.
12 years of coding experience
19 years of employment as a software developer
Bachelor Information Technology, Bachelor Information Technology at Universidade Santa Cecília
B.S. Cybersecurity and Information Assurance Cybersecurity, B.S. Cybersecurity and Information Assurance Cybersecurity at Western Governors University
Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
Role in this project:
Back-end Developer & Security Engineer
Contributions:29 commits, 13 PRs, 42 pushes in 4 years
Contributions summary:Marcelo significantly modified the `DeathStar.py` file, suggesting a focus on enhancing the core functionality of the `deathstar` tool. The changes addressed Empire REST API fixes and included adjustments to module execution and result retrieval. Additionally, the user introduced new features like a Kyber Crystals laser system, which likely involves custom scripting or logic to perform Active Directory attacks leveraging the Empire framework. The changes also indicate a deeper understanding of the tool's internal workings.
Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.
Role in this project:
DevOps Engineer
Contributions:75 commits, 2 PRs, 16 pushes in 11 months
Contributions summary:Marcelo primarily focused on automating and configuring infrastructure for red team operations. Their contributions included modifying shell scripts to install dependencies, automating SSH key generation, integrating Let'sEncrypt certificate generation, and adding support for DNS entries. They also updated and configured core dependencies such as those required by Cobalt Strike and Metasploit. These changes indicate a focus on streamlining and securing infrastructure for red team activities.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.