Open to opportunities

Andre Augusto Bortoli

@andreaugustobortoli

Message

Proactive Security Engineer with expertise in Secure Software Development.

Brazil

Message

What I'm looking for

I am looking for a role that fosters innovation in security and offers opportunities for professional growth.

I am a proactive and self-motivated Security Engineer with over three years of experience specializing in Secure Software Development. My expertise lies in low-level systems analysis using C via eBPF and Rust within Linux environments, particularly Ubuntu and Debian. I have a strong track record of developing custom security tools and automation using Python, which has significantly enhanced security compliance and vulnerability management in my previous roles.

Throughout my career, I have achieved notable milestones, such as reducing accidental secret exposure by 15.5% across over 10,000 repositories and increasing security compliance by 63% within a single quarter. My contributions to security engineering have been recognized with awards, including PROOFSEC’s Top Employee award in 2022. I am passionate about advancing security through research and innovation, as evidenced by my publications in peer-reviewed conferences.

Experience

Work history, roles, and key accomplishments

Current

Application Security Engineer

Current

Luizalabs (Magalu)

May 2024 - Present (1 year 1 month)

As an Application Security Engineer, I reduced accidental secret exposure by 15.5% across 10,000+ repositories by deploying a Python-based active security scanner. I achieved a 63% increase in security compliance by implementing an OWASP-aligned automated scanning solution and improved security scalability by centralizing CI/CD security validations.

Python Gitleaks OWASP CI CD Security Compliance Automation Security Scanners

Security Software Engineer

PROOFSEC

Feb 2022 - May 2024 (2 years 3 months)

In my role as a Security Software Engineer, I eliminated over 31,000 hours of manual work by developing automation tools and security pipelines. I enhanced the software security posture by enabling early-stage vulnerability detection and strengthened threat visibility through a honeypot-integrated data pipeline.

Automation APIs SAST DAST SCA Pipeline Security Threat Visibility

Education

Degrees, certifications, and relevant coursework

Federal University of Rio Grande do Sul

Master’s, Computer Science

2025 - 2027

Pursuing a Master’s in Computer Science with a specialization in Cybersecurity, focusing on advanced topics in security and software development.

Federal Institute of Paraná

Technologist, Systems Analysis and Development

2022 - 2024

Studied Systems Analysis and Development, with a graduation project focused on developing an Intrusion Detection System (IDS) for Linux environments using eBPF and machine learning algorithms.