Renan Rocha
Cyber Threat Hunting Analyst
Santa Catarina, Brazil
Summary
👤
Senior🎓
Top SchoolRenan Rocha is a Cyber Threat Hunting Analyst and application security specialist with 10 years of experience protecting systems from sophisticated web and supply-chain threats. He combines hands-on vulnerability discovery and remediation—demonstrated by security fixes to the popular systeminformation Node.js library—with applied expertise in S-SDLC, SAST/DAST, CI/CD hardening, and WAFs. Renan has a strong research background from multiple academic labs and an M.Sc. in Computer Science, and he pairs that with practical bug-hunting and pentesting work, including CVE reporting and CTF participation. Comfortable across languages from Python and JavaScript to Rust and C/C++, he automates security workflows to scale defenses and reduce developer friction. Currently hunting threats at Solo Network after leading AppSec/DevSecOps efforts at Nexxera, he also holds an MBA in Information Security and a graduate credential in privacy, reflecting a balance of technical depth and governance awareness.
10 years of coding experience
4 years of employment as a software developer
Master of Science (M.Sc) Computer Science, Master of Science (M.Sc) Computer Science at Universidade Federal de Santa CatarinaMaster of Business Administration - MBA Information Security, Master of Business Administration - MBA Information Security at Descomplica Faculdade Digital
English, Portuguese, Spanish
Github Skills (8)
vulnerabilities10
nodejs10
javascript10
command-injection10
input-validation10
vulnerability10
security10
documentation8
Programming languages (5)
Github contributions (5)
sebhildebrandt/systeminformation
Feb 2021 - May 2021
System Information Library for Node.JS
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:13 commits, 3 comments in 2 months
Contributions summary:Renan focused on identifying and addressing security vulnerabilities within the `systeminformation` library. Their contributions include multiple commits that specifically target and mitigate command injection vulnerabilities, as well as fixes for improper input validation in several functions. Furthermore, the user updated documentation to reflect these security fixes and address DOS injection. Their work improved the security and reliability of the library.
jssystem-information
EffectRenan/utilities
Feb 2019 - Dec 2019
Contributions:158 pushes, 1 branch in 9 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.