Lucas Cedro Temponi

Junior remote role in web application pentesting or red teaming, working on real engagements and growing toward advanced offensive work. I prefer contracting (PJ/B2B) but I’m open to full-time. Based in Brazil (UTC-3), comfortable with US/EU time zones. I’m a web application and network penetration tester in the making, with a background that’s a bit unusual for the field: several years of data analytics and engineering in large industrial environments. For the past months I’ve been 100% focused on offensive security, aiming at web pentesting and red team work. Most of that time has gone into hands-on practice. On TryHackMe I’m in the Ruby league, in the top 2% globally, with 150+ rooms completed. I’ve exploited SQL injection, IDOR and privilege escalation flaws in web targets, and worked through classic network vulnerabilities like EternalBlue, BlueKeep and Shellshock. I’m comfortable with Burp Suite, Nmap and the Metasploit Framework, and I’ve published my first technical write-up. I also studied defensive security along the way, which helps me think about what a finding actually means for the people who have to fix it. I’m sitting for the eJPT in December 2026. Before security, my biggest achievement was at Suzano, where I built a real-time logistics dashboard monitoring timber deliveries to mills in Espírito Santo and Bahia. It processed around 200,000 rows a day from roughly 300 trucks. I’ve designed the whole pipeline: data coming from on-premises servers and SAP HANA into a data warehouse and data mart on Google Cloud, modeled in SQL, then served to Power BI in near real time. It worked well enough that the mill director kept it on a TV in his office all day. That project taught me how data moves between systems, where the weak points tend to be, and how to build something other people truly depend on. I now bring that same mindset to breaking things and documenting how to fix them. On the side, I’m building Brotare IT, a micro-SaaS for forest seedling producers in Goiás, Brazil, helping rural producers adopt agro 4.0 tools. I write findings so people can act on them: clear evidence, real impact, concrete remediation. I’m looking for a junior remote role in web application pentesting or red teaming, ideally as a contractor (PJ), though I’m open to other arrangements.