About

[ profile // appsec & pentesting ]

Lucas Andreatta

AppSec & Pentester

Curitiba, Paraná, Brazil · Portuguese · English · Russian

I’m a developer who moved into security. These days I work between code and infrastructure: reading applications from the inside, testing them like an attacker, and helping teams fix what turns up.

I like the practical side: finding the cause in the code, proving the impact on the system, and leaving behind a fix the team can actually use. In practice, that ranges from code review and AppSec to internal pentesting, Active Directory, and red teaming across AWS, Azure, and GCP.

What I do

• AppSec and code review — reading code with a developer’s eye: OWASP Top 10, authentication and authorization, dependencies, secrets, SAST/DAST, and security in CI/CD.
• Pentest and red team — testing web applications and APIs, exploiting issues such as SQLi, XSS, SSRF, and RCE, and writing technical and executive reports.
• Internal environments and Active Directory — enumeration, ACL abuse, Kerberoasting, AS-REP Roasting, lateral movement, and paths to Domain Admin.
• Cloud offensive security — service enumeration, IAM/RBAC, tokens, compute, and storage across AWS, Azure, and GCP, with scenarios aligned to MITRE ATT&CK Cloud.

Certifications

• HTB CPTSHack The Box Certified Penetration Testing Specialist — hands-on certification covering enumeration, web and network exploitation, Active Directory, pivoting, privilege escalation, and reporting.
• CRTACertified Red Team Analyst — red team operations, Active Directory attack paths, and evasion.
• MCRTAMulti-Cloud Red Team Analyst — identity, IAM/RBAC, and attack paths across AWS, Azure, and GCP.
• ISC2 CCCertified in Cybersecurity — security fundamentals, access control, networks, and operations.
• EXIN ISFSInformation Security Foundation based on ISO/IEC 27001 — information security management fundamentals.

Also: Acronis Cloud Tech Professional — Advanced Security; TrendAI Vision One Cloud Security Certified Practitioner; TrendAI Vision One Security Operations (SecOps) Certified Practitioner.

Experience

1. 2026–nowInformation Security Analyst · Compwire
2. 2026Information Security Analyst · L8 Security
3. 2024–2026Information Security Analyst · Contego Security
4. 2023–2024.NET Developer · Fingertech
5. 2023IT Instructor · On Byte

Open to conversations about AppSec, Product Security, Pentest, Red Team, Active Directory, and Cloud Security.