Ailton Caetano
Senior Information Security Engineer
São Paulo, Brazil
Summary
👤
Senior🎓
Top SchoolAilton Caetano is a Senior Information Security Engineer with 18 years in cybersecurity and 11 years focused on Security Engineering and AppSec, currently driving security at PWS Cloud after a multi-year tenure securing SumUp’s Brazilian fintech and bank operations. He blends hands-on offensive skills—penetration testing, reverse engineering and custom pentest tooling—with strategic work in threat modeling, CI/CD security, vulnerability management and global Bug Bounty programs. At SumUp he translated regulatory mandates into technical controls and evidence packages, helping achieve full compliance with Brazilian Central Bank requirements post-Pix incidents while keeping engineering velocity. An active contributor to the ZAP community, he has authored practical proxy scripts for automated web-app testing and payload manipulation, reflecting a practitioner-first approach. Colleagues know him as a pragmatic evangelist for shifting security left and embedding risk-aware practices in product teams, not as a gatekeeper.
11 years of coding experience
Graduation, Computer Science, Incomplete, Graduation, Computer Science, Incomplete at Universidade Federal do Rio de Janeiro
Portuguese, English, Spanish, French
Github Skills (7)
http10
userscripts10
script10
python10
scripting10
base64-encoding9
regex8
Programming languages (9)
Github contributions (5)
zaproxy/community-scripts
Jul 2015 - Nov 2017
A collection of ZAP scripts and tips provided by the community - pull requests very welcome!
Role in this project:
Security Engineer
Security EngineerContributions:10 commits, 13 PRs, 27 comments in 2 years 4 months
Contributions summary:Ailton contributed several scripts to the `community-scripts` repository for the ZAP proxy. These scripts focus on security testing and analysis, including an HTTP Basic Authentication bruteforcer, HTTP status code filtering, and various HTTP request/response manipulation techniques. The user also implemented scripts for payload encoding, history enumeration, and cookie analysis, indicating a focus on web application security testing and vulnerability assessment.
sarifpull-requestswelcomezapstatic-analysis
DarkLighting/community-scripts
Jul 2015 - Feb 2023
A collection of ZAP scripts provided by the community - pull requests very welcome!
Contributions:8 PRs, 46 pushes, 1 branch in 7 years 8 months
pull-requestspython3perlwelcomezap
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.