Rafael dos Santos
Security Engineer
Brazil
Summary
🤩
RockstarRafael dos Santos is a Security Engineer with a decade of hands-on experience building and hardening web and CI systems from Brazil. He contributes at staff level on GitHub, notably to Globocom projects like secDevLabs—a practical security training lab—and huskyCI, enhancing backend test orchestration and MongoDB integrations for CI security scanning. Comfortable across full-stack and backend domains, he has fixed real vulnerabilities (e.g., XXE), integrated third-party libraries, and implemented core database operations and test-association features. Rafael blends practical secure-development education with production-grade tooling, helping teams shift security left while shipping reliable developer-facing services.
10 years of coding experience
Github Skills (16)
mongodb-database10
develop10
go10
api10
mongodb10
apidoc10
vulnerability10
security10
bson9
json9
automated-tests8
testing8
back-end-development8
database-design8
front-end-development8
Programming languages (8)
Github contributions (5)
globocom/huskyCI
Jun 2018 - Nov 2020
Performing security tests inside your CI
Role in this project:
Back-end Developer
Back-end DeveloperContributions:11 releases, 12 reviews, 615 commits in 2 years 5 months
Contributions summary:Rafael contributed significantly to the backend functionality of the HuskyCI project. The commits demonstrate the implementation of core database interactions and the addition of new features such as the ability to associate different security tests with repositories based on URL and branch. They worked with the MongoDB integration, utilizing specific methods like `Insert`, `Search`, `Update`, and `Upsert` to manage repository and security test data. Additionally, they added functions and changes to start a new security test, showing a focus on expanding the project's features.
pythonsastcontinuous-integrationsafetygitlab-ci
globocom/secDevLabs
Dec 2018 - Oct 2020
A laboratory for learning secure web and mobile development in a practical manner.
Role in this project:Full-stack Developer
Full-stack DeveloperContributions:6 reviews, 155 commits, 180 PRs in 1 year 11 months
Contributions summary:Rafael's contributions span multiple aspects of the repository, indicating a full-stack development role. They implemented initial releases, which likely involved setting up the foundational elements of the applications within the repository. Furthermore, the user worked on fixing security vulnerabilities, such as the XXE vulnerability, and adding improvements to the front-end components. The user also integrated a third-party library (echo).
securelaboratorysecuritymobile-developmentvulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.