MBA in CybersecurityUSP/Esalq Graduate Program

A Cybersecurity professional works to identify, prevent, and respond to digital threats. The scope varies according to specialization, but the most common functions include:

• Penetration testing (pentest) and attack simulation to map vulnerabilities.
• Continuous monitoring of networks and systems for suspicious behavior.
• Digital forensic analysis after security incidents.
• Risk management and compliance with regulations such as LGPD, ISO 27001, and NIST.
• Development of security policies and internal awareness programs.
• Protection of cloud environments and DevSecOps architectures.

Positions range from the Cybersecurity analyst (operational, frontline) to the Cybersecurity expert and engineer (responsible for more complex architecture and projects), through to the CISO (Chief Information Security Officer), who is responsible for the security strategy of the entire organization.

The MBA USP/Esalq in Cybersecurity was structured to cover the two axes: the technical skills required for day-to-day work, and the management and leadership skills that differentiate those who hold senior positions.

The MBA USP/Esalq in Cybersecurity was created for professionals who want to work strategically in one of the fields with the highest demand and talent deficit in Brazil. The course is for different profiles, such as:

• IT professionals (analysts, engineers, system architects) who want to deepen their knowledge of security.
• Technology managers and leaders who need to incorporate the risk dimension into their work.
• Lawyers, compliance, and privacy professionals who deal with LGPD and digital regulation.
• Risk analysts and auditors in regulated sectors (financial, health, energy).
• People making a career transition to the field of technology and security.

The MBA balances technical hard skills (pentest, DevSecOps, cloud security, cryptography) with management skills (leadership, economic analysis, team management), making it suitable both for those already working directly with security and for those coming from adjacent fields.

To apply for the MBA in Cybersecurity, you must have an undergraduate diploma in any field.

There is no requirement for prior training in technology or information security. The course offers an introductory leveling module with Linux and networking fundamentals for Cybersecurity, structured so that students with little technical experience can follow the MBA subjects.

Having basic familiarity with operating systems and networks helps but is not a disqualifying factor. What matters is a willingness to deal with progressive technical content throughout the course.

Yes. The MBA in Cybersecurity has a hands-on approach to several program subjects. Students work with tools and scenarios used in the real market, including:

• Pentest and CTF (Capture the Flag): practical controlled invasion exercises in simulated environments.
• DevSecOps: security integration into software development pipelines.
• Digital forensic analysis: incident investigation techniques and evidence collection.
• Vulnerability analysis of web applications: identification and exploitation of real flaws.
• Social Engineering with AI: simulations of attacks that combine human manipulation and automation.

The practical focus differentiates the course from exclusively theoretical training. The goal is not only to understand what an attack is, but to know how to execute defense and offense in a controlled environment.

The MBA in Cybersecurity covers three major topics: technical, legal-regulatory, and management.

Introductory Module (leveling): Linux and Networks Fundamentals for Cybersecurity.

Module A - Governance and Management: Ethical Hacking, Cloud Security, Cryptography and Quantum Computing, Design Thinking, Data Analysis, Agile, Financial Management, Team Management, and other leadership and business subjects.

Module B - Technical and Legal: DevSecOps, Pentest, and CTF, Digital Forensic Analysis, Web Vulnerability Analysis, Digital Law, Compliance, Regulation and Geopolitics of Cybersecurity, Intelligence, and Cyber Counterintelligence.

Module C - Advanced Management: Risk Management, Incident Management, Blockchain and Smart Contracts, AI & Machine Learning applied to security, Social Engineering with AI, Cybersecurity in the Financial Sector, ESG and Cybersecurity, Deepweb, Honeypots, ISMS (ISO 27001).

This structure combines technical mastery with the ability to make strategic decisions in real-risk environments.

Cybersecurity salaries vary according to experience, size of the company, region, and specialization of the professional. According to recent surveys by the consulting company Robert Half, the salary ranges observed in the Brazilian market are:

• Junior Security Analyst: BRL 6,200 to BRL 10,400.
• Mid-level Security Analyst: BRL 8,500 to BRL 14,300.
• Senior Security Analyst: BRL 11,300 to BRL 19,000.
• PenTester (reference for offensive experts): BRL 13,350 to BRL 18,300.
• Information Security Manager: BRL 22,250 to BRL 37,250.

The MBA USP/Esalq in Cybersecurity is positioned to accelerate the progression of students from the analytical track to expert and leadership positions, where compensation increases more significantly.

Yes. The MBA USP/Esalq in Cybersecurity is 100% online, with live classes via digital platform.

Classes take place in the evening, from 7:00 p.m. to 11:00 p.m. (BRT, UTC-3), which allows you to balance the course with your work schedule. All classes are recorded and remain available until the end of the MBA, so the student can rewatch any content when they need to.

The live format allows direct interaction with professors during classes, the opportunity to raise questions in real-time, and the sharing of experiences with other students from different sectors and regions of Brazil.

The MBA does not require physical presence at any time of the course. The certificate is issued by USP/Esalq regardless of where the student is.

Yes. The MBA in Cybersecurity is recognized by MEC, and the certification is issued by USP/Esalq. USP is a reference in teaching and research, being regularly highlighted among the best universities in Latin America, which adds even more value and credibility to your education.

The course is a graduate course, a modality that in Brazil requires a minimum load of 360 hours and is subject to MEC regulation. By completing the MBA and presenting the Business Case, the student receives a certificate that is valid throughout the country.

The faculty of the MBA in Cybersecurity combines USP professors with experts who work professionally in the field. Among the names approved for dissemination:

• Prof. Daniel Donda - Ethical Hacking, Pentest, and CTF.
• Prof. Emerson Wendt - Cyber Intelligence, Social Engineering with AI.
• Prof. Cristina Godoy Bernardo de Oliveira (USP) - Digital Law.
• Prof. Jaime Simão Sichman (USP) - AI & Machine Learning.
• Prof. Fabiano Guasti Lima (USP) - Financial Management.

This mix combines the consistency of USP's academic teaching with the practice of professionals who work directly with security in real operations.

The MBA final paper follows the Business Case format.

The goal is to develop a solution applied to a real Cybersecurity problem, not a conventional academic dissertation. The student identifies a concrete security challenge in an organization or sector and proposes a structured response: problem analysis, solution proposal, feasibility, and evaluation metrics.

This format brings the final paper closer to the reality of the market and makes the experience directly usable in the professional's career.

The MBA USP/Esalq in Cybersecurity has approximately 360 class hours and evaluation activities, plus 40 hours for the development of the Business Case. The workload is distributed throughout the course modules and includes:

• Live classes with professors.
• Evaluation activities by subject.
• Final test before the Business Case presentation.
• Business Case development and presentation.

The class recordings remain available until the end of the MBA, allowing the student to organize the review of the content at their own pace.