Looking for a job

Luis Mazaro

@luismazaro

Application Security Engineer at Conta Azul, where I built an AppSec program that increased monthly vulnerability remediation by 61%.

Brazil

Message

At Conta Azul, I founded and lead the Application Security program as its sole AppSec engineer. PR security gates increased monthly vulnerability remediation by 61%, and an LLM-based triage agent has reviewed 4,000+ findings, saving about 876 engineer-hours.

I integrated security checks into every pull request, embedded security gates in the AI-native development pipeline, and delivered automated cross-tenant authorization tests across user journeys. I also threat-modeled PCI-scoped and MCP/agent features.

At PagBank, I implemented STRIDE-based threat modeling and SAST, SCA, and DAST gates in CI/CD. I performed web, API, and mobile pentests, focusing on business-logic flaws in financial flows.

Experience

Work history, roles, and key accomplishments

Current

Senior Application Security Analyst

Current

Conta Azul

Mar 2026 - Present (8 months)

Founded and lead the Application Security program as the sole AppSec engineer for about 300 engineers.

• Raised engineering teams' monthly vulnerability remediation by 61% with PR security gates, SLA-based ownership and remediation OKRs
• Integrated Aikido with GitHub to security-check 100% of pull requests and block critical/high hardcoded credentials before merge; no new critical/high secrets r

Cyber Security Engineer

PagBank

May 2021 - Feb 2026 (4 years 9 months)

Security Strategy & Architecture: Defined security strategy from product inception, including requirements analysis and architectural standards, ensuring compliance with PCI DSS, LGPD, and SOX. Developed clear guidelines for developers outlining minimum security requirements aligned with regulatory standards.

Threat Modeling: Designed and implemented a Threat Modeling approach based on the STRIDE