Cybersecurity Experience

Independent Security Researcher — HackerOne & Bugcrowd

São Paulo, Brazil (remote) · Feb 2026 — Present

Identified and validated web application and API vulnerabilities using Burp Suite, Nmap, OWASP ZAP, ffuf, and Kali Linux, contributing to 20+ security assessments across public and private bug bounty programs.
Conducted reconnaissance, attack surface mapping, security automation, and manual security testing using Red Team methodologies and OWASP Top 10 frameworks, uncovering vulnerabilities across Authentication, Authorization, Business Logic, and Security Misconfiguration categories.
Authored 20+ detailed vulnerability reports including PoC, risk analysis, and remediation guidance — enhancing triage quality by 30% and accelerating responsible disclosure timelines by 25%.

São Paulo, Brazil (remote) · Sep 2024 — Present

Ranked among the Top 1% of TryHackMe users worldwide by completing 321+ hands-on security labs focused on offensive security, defensive security, and real-world attack scenarios.
Developed practical cybersecurity expertise using Linux, Burp Suite, Nmap, SIEM concepts, privilege escalation techniques, and forensic analysis workflows, earning 52 badges across Web Security, Active Directory, Malware Analysis, Digital Forensics, OSINT, and Incident Response.

São Paulo, Brazil (remote) · Sep 2024 — Present

Competed in 11 international Capture The Flag competitions using Web Exploitation, Active Directory, OSINT, Cryptography, Reverse Engineering, and Binary Exploitation techniques, capturing 77 flags across competitive cybersecurity events.
Achieved 36,050 points and a Top 65 ranking among 1,200+ participants by solving advanced challenges involving exploitation, enumeration, privilege escalation, and secure problem-solving under time constraints.