I build backends, and I find what your developers missed.
Full-stack developer working with TypeScript, and security researcher on the side. Web apps, Android apps, cloud environments. If it has an attack surface, I work it. My background in development is not a detour. It's the reason I'm effective as a pentester: I know how things are built, so I know exactly how they break.
- Full-stack developer (PJ) since October 2024
- NestJS in production on a private client project
- Data modeling and queries with PostgreSQL and MySQL
- Caching with Redis, environments with Docker
- API consumption and process automation with n8n
- Claude Code as my AI tool in daily development
Kaizen (capstone project): built with NestJS, Prisma and Next.js
- Web application pentesting
- Android APK analysis and runtime manipulation
- Network infrastructure and Active Directory attacks
- Bug bounty hunting with custom automation
- Social engineering and phishing simulations
C Python Bash Assembly PowerShell TypeScript
📧 fcasagrandi38@gmail.com 💼 LinkedIn 🌍 Brazil · Remote
Open to backend roles (PJ). Security work on authorized targets only.




