# Thales Sgarbi Salata — Personal Portfolio > Full Stack · DevSecOps · Information Security — Curitiba, Brazil I build and maintain web and mobile applications, integrate services and automate infrastructure with security embedded in the development lifecycle. - Email: tsalata@alunos.utfpr.edu.br - GitHub: https://github.com/Taresu - LinkedIn: https://linkedin.com/in/thales-salata - CV (PT): https://taresu.github.io/assets/curriculo-thales-salata.pdf - Résumé (EN): https://taresu.github.io/assets/resume-thales-salata.pdf --- ## About I'm an Information Systems graduate from UTFPR. I work as a Full Stack developer on the university's institutional portal and as one of the maintainers of Nerdz, a cross-platform mobile and web application. I also volunteer as a coordinator at VESPAS, UTFPR's cybersecurity extension program and CTF team. My experience connects development, operations and security: React/TypeScript and Python on the UTFPR Portal; React Native, Expo and NestJS on Nerdz; automation, CI/CD, cloud and vulnerability investigation in corporate environments. I also use generative and agentic AI in software development and implemented a multi-agent orchestrator with the Anthropic API and MCP, while maintaining critical review of AI-assisted code. **Stats:** 7 Cisco Networking Academy courses · ~370 VoIP devices migrated · 3 Nerdz platforms --- ## Experience ### Full Stack Developer — UTFPR (Jul 2025 – present) Develop and maintain UTFPR's Portal with Plone 6 and Volto — integrating the React/Volto frontend with the Plone backend, aligned with the Gov.br Design System v4.0, including refactoring and modernizing legacy code. Investigate issues across application, services and environments; handle security fixes, technical documentation and CI/CD pipeline maintenance on GitLab. Collaborate with UI/UX, infrastructure and server teams to define, implement and release new solutions. ### DevSecOps Intern — Câmara Municipal de Curitiba (Mar 2024 – Dec 2024) Architected and built Unix-based open-source solutions with Ansible, Vagrant and Molecule in a Linux environment using SSO and LDAP for service authentication. Fixed known vulnerabilities guided by the OWASP Top 10, following Conventional Commits. Milestone: automated migration of ~370 VoIP phones from static IP to DHCP using Python, Selenium and requests. ### Web | Frontend Developer — UTFPR (Aug 2023 – Feb 2024) Built reusable components in React and Volto, implemented responsive and accessible layouts, and refactored legacy components and code. Worked on fixing visual and functional inconsistencies, documenting components and collaborating with the UI/UX team to turn prototypes into production interfaces. ### Volunteer Coordinator — VESPAS / UTFPR (2022 – present) Run the official cybersecurity alerts channel, covering critical vulnerabilities (CVSS 10.0) and information-security awareness. Compete with the CTF team and build labs/challenges for our own competitions. Current focus: OWASP Top 10:2025 and LLM Risks. ### Information Security Intern — Volkswagen do Brasil (Jun 2022 – Jan 2023) Supported IAM processes with Active Directory, alongside vulnerability analysis, risk management and ISO 27001 audit follow-up. Operated Axur (monitoring) and Prisma Cloud (AWS Security) in an SOC context, plus information-security awareness initiatives. --- ## Featured Projects ### Education in Cybersecurity (TCC / Final Course Project — UTFPR, 2026) *Tags: Generative AI, Mixed methods, MITRE ATT&CK, Phishing, MOOC* Mixed-methods applied research that developed and evaluated a cybersecurity education intervention on Portal Sophia-CT, combining a MOOC, historical narrative, practical activities and phishing simulations mapped with MITRE ATT&CK. In the pilot, the mean score increased from 7.54 to 9.85. ### Nerdz — Mobile and web application *Stack: React Native, Expo, NestJS, Prisma, PostgreSQL, Clerk, AWS S3/CloudFront* Maintenance and evolution of a group-study product for web, Android and iOS, with a React Native/Expo frontend, NestJS API, Prisma/PostgreSQL, Clerk authentication and distribution through AWS S3/CloudFront. ### VoIP migration at scale *Stack: Python, Selenium, requests* Python bot that reconfigured ~370 VoIP phones at the Curitiba City Council, migrating from static IP to DHCP — Selenium for web automation plus requests with session cookies for the POST calls. ### UTFPR Portal restructuring *Stack: React, Volto, Plone 6, GitLab CI/CD* New Volto / Plone 6 components for the university's institutional portal, aligned with the Gov.br Design System 4.0 — deprecated-code migration, continuous documentation and GitLab CI/CD. ### VESPAS — CTF Labs & Alerts *Stack: Various CTF tools, security research* Labs and challenges for VESPAS's own CTFs, plus coordination of the public security-alerts channel — from critical CVEs to practical protection tips for the community. --- ## Skills **Offensive Security:** Penetration testing, CTF, OWASP Top 10, LLM risks, phishing simulation, MITRE ATT&CK **Defense & Detection:** SOC operations, IAM, Axur, Prisma Cloud, ISO 27001, vulnerability management **Development:** React, TypeScript, React Native, Expo, NestJS, Plone 6, Volto, Python, PostgreSQL, Prisma **Infrastructure:** Ansible, Vagrant, Molecule, CI/CD (GitLab), Docker, AWS S3/CloudFront **AI-assisted development:** Anthropic API, MCP, multi-agent orchestration, generative AI tooling --- ## Contact Open to Full Stack, DevSecOps and Information Security opportunities. If your team needs to connect product, operations and security, let's talk. - Email: tsalata@alunos.utfpr.edu.br - GitHub: https://github.com/Taresu - LinkedIn: https://linkedin.com/in/thales-salata