LUAN GONZAGA

I build web products, break them to make them safer, and market them to grow.
/PILLARS
- Explore web development ↗
Fast, scalable and well-crafted web applications. From landing pages that convert to full-stack products — clean code, modern stack, performance first.
Next.jsTypeScriptNodeAPIs - Explore offensive security ↗
Bug bounty, penetration testing and Active Directory red teaming. CRTA & CRTS certified — I break web apps, APIs and networks to make them safer, then report clearly.
Bug BountyRed TeamActive DirectoryAPI Pentest - Explore digital marketing ↗
Growth driven by data. Paid traffic, funnels, copy and conversion — marketing that ships measurable results, not vanity metrics.
Paid TrafficFunnelsCopyAnalytics
/SKILLS
Security
- Burp Suite
- Wazuh
- MITRE ATT&CK
- OSINT
- Sysmon
- Malware Analysis
- ELK Stack
- Active Directory
Development
- Python
- JavaScript
- HTML
- jQuery
- MySQL
- Bash
- Git
- Docker
Infrastructure
- Linux
- Windows Server
- TCP/IP
- Network Security
- Network Infrastructure
/EXPERIENCE
Active participation in Bug Bounty and Vulnerability Disclosure Programs, performing security testing on Web and Mobile applications and responsibly reporting vulnerabilities.
- Web and Mobile security testing
- IDOR, authentication/authorization flaws, data exposure
- Clear and concise technical vulnerability reporting
Strengthening internal infrastructure security through hardening, network segmentation and access controls, while running vulnerability assessments and responding to incidents on critical systems.
- Hardening, segmentation & access control
- OWASP Top 10 assessments — SQLi, XSS, CSRF, auth flaws
- Python automations
- E-commerce performance & security
- Monitoring & incident response
Managed the e-commerce operation end to end: product registration, sales invoicing, customer support, website updates and marketing campaigns, reporting monthly revenue and costs to leadership.
- Product registration & catalog
- Marketing campaigns & social media
- Monthly revenue & cost reporting
/EDUCATION
Full degree in cyber defense: offensive and defensive security, network architecture, secure systems, incident response and vulnerability analysis.
LET'S CONNECT
Want to discuss technology, security, marketing or a professional opportunity? Get in touch.