Rachel B.
Brazil · Offensive Security Engineer | Web & Cloud Pentesting | Red Team · TOTVS
UNIP
7 followers
About
Offensive security professional specializing in web application and cloud penetration testing, vulnerability research, and adversary simulation. Experienced in identifying complex attack paths across modern infrastructures and improving defensive postures through realistic simulations and security automation.
Specialties
- Incident Response
- Network Penetration Testing
- Penetration Testing
- Red Team Operations
- Web Application Testing
Skills
- Web Application Pentesting
- Red Team Operations
- Adversary Simulation
- Vulnerability Research
- Information Gathering & Reconnaissance
- OWASP Top 10
- AWS Security
- GCP Security
- IAM Analysis
- Container & Infrastructure Exposure
26 skills in total
Experience
-
Cyber Security Engineer
TOTVS
Jan 2022 — Present
Remote
-
Advanced Support Analyst – Level III
HostGator Latin America
Dec 2018 — Feb 2022
Florianópolis, Brazil
-
Helpdesk Analyst
Unisys
Feb 2014 — Feb 2017
Campo Grande, Brazil
Education
-
UNIP
Information Security Technologist
Jan 2021 — Dec 2024
Recent posts
Stop building features only for happy-path users. Start thinking about evil users.
Every application works perfectly when the user behaves exactly as expected.
Real security problems begin when someone intentionally abuses assumptions, workflows and business logic.
That’s where Evil User Stories become powerful.
Instead of asking:
“How will the user use this feature?”
ask:
“How would an attacker abuse it?”
Examples:
What if a user manipulates a payment flow?
What if an attacker automates this endpoint?
What happens if permissions are chained together?
Can someone turn a small logic flaw into account takeover?
Most critical vulnerabilities are not caused by “hackers typing fast”.
They come from developers trusting user behavior too much.
Security maturity starts when engineering teams begin designing with adversarial thinking in mind.
Build for users.
But threat model for attackers.