Cauê Faleiros
Offensive Security
I'm focused on offensive security, mainly web application and API pentesting. I like taking a bug all the way: finding it, proving it works, and figuring out how to fix it.
I came to security from software development, so I've spent a lot of time building the kind of systems I now try to break, and that still shapes how I hunt for bugs. I study every day with labs and CTFs, and I publish write-ups here as I go.
Experience
Agência Compor
I develop and maintain web applications using Node.js, TypeScript, and React, implementing secure authentication and strict access controls guided by OWASP. I manage the production infrastructure with Docker and CI/CD pipelines, centralizing log auditing with Loki and Grafana for rapid incident investigation.
I built APIs and backend integrations using Node.js and Express, working directly on database modeling with PostgreSQL. I collaborated on bug fixing, code review, and analyzing operational failures to ensure the stability and security of internal services.
FMRP · USP
I supported the operation of infrastructure services on Google Cloud Platform (GCP) and assisted with containerized environments using Docker. I utilized Zabbix and Grafana to track corporate network availability and monitor the stability of systems in real time.
Stack
- Pentest
- Burp Suite · Caido · OWASP ZAP · Nmap · ffuf · Gobuster · SQLmap · Nuclei · Nessus
- Scripting
- Python · Go · Bash · PowerShell · SQL
- Infra
- Docker · Grafana · Prometheus · Loki · CI/CD · GCP