05/28/2026 updated
100 % available
IT Security Auditor | Penetration Tester | Python Full-Stack Developer
Anápolis, Brazil
Worldwide
AI AgentsJava (Programming Language)JavaScriptApplication Programming Interfaces (APIs)Amazon Web ServicesPenetration TestingSoftware as a ServiceDevOpsWeb DevelopmentDjangoGitHubInformation Technology AuditPython (Programming Language)PostgreSQLInformation Technology Security Auditing
I am a Python Full-Stack Developer with a strong background in IT security, penetration testing, and security auditing. I help companies build secure, scalable, and maintainable web applications while applying security best practices throughout the development lifecycle.
My main technical stack includes Python, FastAPI, Django, JavaScript, React, Next.js, PostgreSQL, SQL, REST APIs, Docker, Git, GitHub Actions, and cloud-ready architectures. I work on backend development, API integrations, internal tools, dashboards, SaaS MVPs, authentication systems, workflow automation, database design, and secure application architecture.
On the backend, I have experience developing APIs, implementing business logic, working with relational databases, designing authentication flows, handling integrations with external systems, and creating maintainable service structures. I am comfortable working with FastAPI, Django, RESTful APIs, JWT authentication, PostgreSQL, SQLAlchemy, Pydantic, Docker Compose, Linux environments, and Git-based workflows.
On the frontend, I work with React, Next.js, JavaScript, HTML, CSS, Tailwind CSS, responsive layouts, forms, dashboards, and API consumption. I can support full-stack projects by connecting frontend interfaces to backend services, implementing user flows, and collaborating with design or product teams.
I also bring strong cybersecurity knowledge to development projects. My experience includes OWASP Top 10, web application security testing, API security testing, vulnerability assessment, penetration testing support, access control reviews, secure authentication, security headers, TLS/SSL review, infrastructure hardening, and secure SDLC practices. I have worked with tools and methodologies such as Burp Suite, OWASP ZAP, Nmap, Nessus, Wazuh, Wireshark, SSL Labs, ISO/IEC 27001, ISO/IEC 27002, CIS Controls, and NIST Cybersecurity Framework.
My professional experience includes working with financial institutions, cooperative environments, legal technology projects, public-sector systems, and compliance-driven applications. I have supported system maintenance, testing, vulnerability analysis, technical documentation, security audits, remediation planning, and collaboration with development and DevOps teams.
I can deliver full-stack web applications, secure APIs, backend services, internal tools, dashboards, automation scripts, database models, security reviews, vulnerability assessments, penetration testing reports, and practical remediation recommendations. My main strength is combining software development with security knowledge, helping clients build systems that are functional, maintainable, and secure from the start.
Experience
Professional experience0 - 5 years
Freelancer since2025
Languages
EnglishFluentPortugueseNative speaker
Project history
• Lead the integration of a U.S. e‑filing platform, defining a Next.js frontend, Python/FastAPI backend, PostgreSQL database, and Docker‑based local development workflow. • Designed authentication and role‑based access models, user and firm data models, API contracts, and environment configuration, ensuring secure certificate‑signing integration with Tyler Technologies’ EFM APIs. • Directed the architecture for a Java/Spring Boot service to handle SOAP‑based integrations and collaborated closely with developers to deliver secure, scalable solutions. • Translated unclear business requirements into actionable development tasks, organized backlog items, and mentored the team on secure coding practices, CI/CD pipelines, and documentation. • Facilitated distributed team collaboration and alignment with legal and business stakeholders while ensuring compliance with ISO/IEC 27001 security standards