LUAN GONZAGA

LUAN GONZAGA
Web Developer, Offensive Security, Digital Marketing

I build web products, break them to make them safer, and market them to grow.

/PILLARS

  • Fast, scalable and well-crafted web applications. From landing pages that convert to full-stack products — clean code, modern stack, performance first.

    Next.jsTypeScriptNodeAPIs
    Explore web development
  • Bug bounty, penetration testing and Active Directory red teaming. CRTA & CRTS certified — I break web apps, APIs and networks to make them safer, then report clearly.

    Bug BountyRed TeamActive DirectoryAPI Pentest
    Explore offensive security
  • Growth driven by data. Paid traffic, funnels, copy and conversion — marketing that ships measurable results, not vanity metrics.

    Paid TrafficFunnelsCopyAnalytics
    Explore digital marketing

/SKILLS

Security

  • Burp Suite
  • Wazuh
  • MITRE ATT&CK
  • OSINT
  • Sysmon
  • Malware Analysis
  • ELK Stack
  • Active Directory

Development

  • Python
  • JavaScript
  • HTML
  • jQuery
  • MySQL
  • Bash
  • Git
  • Docker

Infrastructure

  • Linux
  • Windows Server
  • TCP/IP
  • Network Security
  • Network Infrastructure

/EXPERIENCE

  • Active participation in Bug Bounty and Vulnerability Disclosure Programs, performing security testing on Web and Mobile applications and responsibly reporting vulnerabilities.

    • Web and Mobile security testing
    • IDOR, authentication/authorization flaws, data exposure
    • Clear and concise technical vulnerability reporting
  • Strengthening internal infrastructure security through hardening, network segmentation and access controls, while running vulnerability assessments and responding to incidents on critical systems.

    • Hardening, segmentation & access control
    • OWASP Top 10 assessments — SQLi, XSS, CSRF, auth flaws
    • Python automations
    • E-commerce performance & security
    • Monitoring & incident response
  • Managed the e-commerce operation end to end: product registration, sales invoicing, customer support, website updates and marketing campaigns, reporting monthly revenue and costs to leadership.

    • Product registration & catalog
    • Marketing campaigns & social media
    • Monthly revenue & cost reporting

/EDUCATION

  • Full degree in cyber defense: offensive and defensive security, network architecture, secure systems, incident response and vulnerability analysis.

Open to professional opportunities

LET'S CONNECT

Want to discuss technology, security, marketing or a professional opportunity? Get in touch.