Full Stack · DevSecOps · Information Security
Curitiba, Brazil
I build and maintain web and mobile products, automate infrastructure, and bring security into the development lifecycle.
Portfolio · GitHub · LinkedIn · Email
I am an Information Systems graduate from UTFPR working across application development, platform integration, cloud operations, and cybersecurity. My current work includes the UTFPR institutional portal, the Nerdz cross-platform product, security research, and AI-assisted engineering with careful human review.
React and Volto interfaces integrated with Plone 6, aligned with the Gov.br Design System and supported by GitLab CI/CD.
A group-study product for web, Android, and iOS built with React Native, Expo, NestJS, Prisma, PostgreSQL, and AWS delivery services.
A dependency-free Go CLI for honest verification of downloaded packages using OpenPGP signatures, pinned hashes, and explicit trust levels.
Cybersecurity alerts, CTF labs, and security research through UTFPR’s VESPAS extension program.
- Development: React, TypeScript, React Native, Expo, NestJS, Plone, Volto, Python, Go, PostgreSQL, Prisma
- DevSecOps: GitLab CI/CD, Git, Docker, Ansible, Vagrant, Molecule, AWS S3/CloudFront
- Offensive security: CTF, penetration testing, phishing simulation, OWASP Top 10, MITRE ATT&CK, LLM risks
- Defense and detection: IAM, Active Directory, SOC operations, vulnerability management, Axur, Prisma Cloud, ISO 27001
- AI-assisted engineering: Anthropic API, MCP, multi-agent orchestration, generative AI tooling
The linked documents are intentionally public portfolio material. Local screenshots, tool sessions, plans, installers, environments, and keys are excluded from the repository and deployment.
Requires Node.js.
npm install
npm startOpen http://localhost:3000.
Useful checks:
npm run verify:static
npm run test:security
npm run test:seo
npm run test:hygiene
npm run test:hooksTo capture reference screenshots while the server is running:
npm run screenshot -- http://localhost:3000 portfolioThe site is a zero-build static portfolio with a Cloudflare Worker for response headers and Markdown content negotiation. wrangler.toml points Cloudflare at the repository root, while .assetsignore publishes only the website assets and discovery files.
npm run build:pages
npm run deploy:cloudflareindex.html Portfolio interface, styles, translations, and browser logic
index.md Machine-readable portfolio profile
assets/ Published documents, media, logos, icons, and vendor assets
worker.js Cloudflare response headers and Markdown negotiation
serve.mjs Loopback development server
test/ Security, SEO, hook, and repository-hygiene tests
wrangler.toml Cloudflare deployment configuration
package.json Development commands and tooling
The project is released under the MIT License.