Fernando Fresteiro

Conducted IT risk assessments through an offensive lens and architected proactive Attack Surface Management (ASM) solutions. Integrated automation and LLMs to streamline threat prioritization and deliver actionable technical insights and executive-level KPIs.

Performed web penetration tests and supported Attack Surface Management (ASM) implementation. Built headless crawling solutions and other techniques to avoid blocking during reconnaissance.

Performed security assessments for microservices and cloud-native applications, focusing on identifying and mitigating vulnerabilities. Managed the Bug Bounty program by triaging reports and coordinating rapid patching with internal squads, and implemented controls to prevent fraud and data leakage.

Executed large-scale infrastructure penetration tests and network security assessments across legacy and cloud architectures. Developed custom scripts for automated reconnaissance and exploitation to protect critical telecommunications data.

Performed advanced penetration testing on web and mobile platforms for major e-commerce brands, focusing on business logic and API security flaws. Collaborated with AppSec to integrate automated scanning tools and promote secure coding practices across engineering chapters.

Led the Offensive Security (OffSec) front, performing continuous penetration testing and Red Team operations to identify critical flaws across the digital ecosystem. Managed the vulnerability lifecycle and supported development teams with technical remediation guidance.

Earned a Bachelor’s Degree in Information Systems from Estácio de Sá University (UNESA).