Sr. Application Security Engineer • CEH
Brazil · Web3 & AppSec · DevSecOps & Automation
Security engineer with 10+ years across application security, penetration testing, and blockchain/Web3 auditing.
I build secure SDLCs, automate threat mitigation, and help dev teams ship safely.
- Sr AppSec Engineer @ COFCO International — integrating DevSecOps on Azure, automating vulnerability remediation with logging/monitoring pipelines and code analysis.
- Blockchain Security Auditor @ Hacken — research on Web3/DApps, code review, vulnerability analysis.
- Past roles include AppSec/pentesting at Mercado Livre, Intuition Machines, TechBiz Forense Digital, and an earlier foundation in software engineering.
“Security is not a product, but a process.” — Bruce Schneier
AppSec & Pentest: Burp Suite · OWASP ZAP · Metasploit · Nmap · Nikto · Fortify (SAST) · DAST
DevSecOps: Azure DevOps · CI/CD hardening · Code Scanning · Policy as Code · Ansible
Cloud/Infra & Ops: Linux (CentOS) · SIEM · Logging/Monitoring · Incident Response
Code: Python · Java · JavaScript · Flask · Git · HTML
Data: PostgreSQL · MySQL
- Threat modeling & secure design reviews
- SAST/DAST/Secrets/Dependencies automation in CI
- Web & mobile pentests, API security, OWASP Top 10
- Web3/DApps code review, vuln research, PoCs
- Developer enablement: fix-first guidance, guardrails, reusable templates
-
Awesome Cyber Security — Curated list of security tools, libraries, docs, and resources.
#security #appsec #pentest -
Awesome Web3 Security — Curated resources for smart contracts and Web3 defense.
#web3 #smartcontracts #dapps
Want a quick tour? Open an issue and I’ll add examples, sample PoCs, and walkthroughs.
- CEH — Certified Ethical Hacker
- CCNA (Intro to Networks)
- B.Sc. in Computer Science — FAAFI
- Courses: Web Application Intrusion Testing · OOP (Java) · JavaScript
- 💼 LinkedIn: linkedin.com/in/fabionoth
- 📨 Email: fabio.noth [at] gmail.com
- 🐙 GitHub: github.com/fabionoth
- Set up or uplift secure SDLC and DevSecOps
- Pentest & code review (Web, API, Mobile, Smart Contracts)
- Threat modeling, security coaching, and playbooks
If you want to collaborate, open a discussion or reach out on LinkedIn.
Thanks for stopping by! ✨