Bernardo Haab

Contributed to a microservices-based event platform with over 400K votes and 500K views, supporting video management, registration, AI-based video analysis, and administrative workflows. Designed a shared NestJS authentication and authorization library with role-based access control and structured logging, adopted by 10+ microservices.

Conducted static application security testing using Semgrep and Opengrep. Investigated and validated a potential remote code execution vulnerability in PHP file processing.

Developed web applications using Angular, ReactJS, TypeScript, and Node.js, working on data modeling, APIs, and requirements analysis. Developed an event management system with caching, customization, event and guest registration, email sending, and analytics dashboards.

Developed a condominium management system using ReactJS, TypeScript, Node.js, and MySQL. Contributed to defining the MVP, developed APIs, and aligned requirements with clients.

Developed web systems using Angular, Java, and SQL Server.

Developed web applications with EmberJs, TypeScript, Node.js, and MySQL.

Completed a Bachelor's Degree in Computer Science in July 2026.

Activities and societies: Capstone project with white-box analysis and threat modeling using Threat Modeling, STRIDE, OWASP WSTG v4, and DREAD-D. Identified and classified 24 vulnerabilities, focusing on authorization, business logic, infrastructure, and file processing.

Completed a 300-hour Offensive Security and Cybersecurity Operations Program, including a capstone project with white-box analysis and threat modeling.

Participated in an exchange program in Computer Science in 2024.