Arthur Hendrich Alencar De Menezes Email & Phone Number

I am currently a Computer Science student at Cesar School and a QA Analyst, focusing on Secure Applications. Since I was 11 years old, I have always been deeply engaged in the field of security, although I didn’t conceptually understand what I was doing at the time. I developed various hacks for games and also created servers and plugins.When I started college, I had the opportunity to work in the QA field, where I realized the deep connection between software quality and security. In October 2022, I began seriously studying Offensive Security, understanding that a good security professional needs to know both attacks and defenses. As a result, I obtained important certifications like DCPT, eCPPT, CEH Practical, and most recently, eWPTX, which is focused on web application penetration testing.At Facilit Tecnologia, my QA responsibilities extend to application security, where I conduct vulnerability assessments (SAST/DAST) and optimize performance queries with a focus on preventing security flaws. I also manage automated tests for Web and Mobile, ensuring that AppSec practices are integrated into the development lifecycle from the start.Before that, I worked as a Cyber Security Analyst at QoS Tecnologia, where I performed BlackBox penetration tests and managed firewalls and intrusion detection systems. I also had the opportunity to teach Git/GitHub and programming at CESAR School, strengthening my ability to communicate knowledge clearly, as teaching is learning after all.Key Skills:- Vulnerability Assessment (SAST/DAST)- Automated Testing (Cypress, Appium)- Web Penetration Testing (eWPTX, CEH Practical)- Web Application Hardening and Protection- Continuous Integration/Continuous Delivery (Jenkins, CI/CD)- Threat Modeling and Secure Code ReviewAchievements:- Temporary leadership of the QA department, focusing on improving test coverage and secure development practices.- Identification of critical vulnerabilities in web applications and proposing fixes that improved the security posture of client companies.- Development of CI/CD pipelines integrated with security practices, ensuring secure and agile deliveries.- Application of AppSec best practices in innovative projects, contributing to the creation of secure and scalable solutions.