Caua Fnk
@cauafnk
Penetration Tester at SovereignTech finding critical API, payment, and cloud security vulnerabilities for regulated environments.
BrazilWhat I'm looking for
At SovereignTech, I conduct black-box penetration tests for e-commerce and software clients, including engagements aligned with PCI DSS. I identified unauthenticated API exposure, an exposed Abilities API rated CVSS 9.8, and an internal SSRF through misconfigured WordPress XML-RPC.
Through ANS Alberto, I test government websites and systems, assessing TLS/SSL posture and mapping attack surfaces. I also reported a critical checkout business-logic flaw that could reduce a PIX payment, and I write Python scripts to automate security testing.
Experience
Work history, roles, and key accomplishments
Pentester / Red Team (PJ)
ANS Alberto
Mar 2026 - Present (6 months)
Consultoria terceirizada em engajamentos black-box para clientes governamentais. Executou testes de intrusão, análise TLS/SSL e mapeamento de superfície de ataque.
Penetration Tester | Bug Bounty
BugHunt.com
Feb 2026 - Present (7 months)
Identificação de vulnerabilidade crítica de lógica de negócio em fluxo de pagamento via manipulação de OrderID e SessionID, permitindo reduzir o valor pago via PIX. Reportada com PoC completo.
Sócio & Pentester / Red Team
SovereignTech
Feb 2025 - Present (1 year 7 months)
Sócio-fundador e consultor técnico em engajamentos de Penetration Testing black-box para clientes de e-commerce e tecnologia/software. Executou testes de intrusão, identificou vulnerabilidades críticas e elaborou relatórios técnicos completos.
Pentester / Red Teamer (PJ)
Campanha de Red Team empresarial
Mar 2025 - Jun 2025 (3 months)
Planejamento e execução de phishing como vetor de acesso inicial, ataques em Active Directory pós-comprometimento e colaboração na consolidação de achados para relatório técnico final.
Education
Degrees, certifications, and relevant coursework
TryHackMe
Red Teaming Learning Path, Cybersecurity
Completed the Red Teaming Learning Path, covering red team operations and techniques.
TryHackMe
Web Application Red Teaming Learning Path, Cybersecurity
Completed the Web Application Red Teaming Learning Path, focusing on web application security.
TryHackMe
AI Security Course, AI Security
Completed the AI Security course, covering security aspects of artificial intelligence.
Udemy
Ethical Hacking Fundamentals, Ethical Hacking
Completed a practical Ethical Hacking fundamentals course.
Tech stack
Software and tools used professionally
Availability
Location
BrazilAuthorized to work in
Salary expectations
Social media
Interested in hiring Caua?
You can contact Caua and 90k+ other talented remote workers on Himalayas.
Message CauaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
