Summary
Thalyson Sousa is an AppSec senior engineer with eight years of hands-on experience in pentesting, secure code review, mobile security, and building secure development pipelines. He has a proven track record in web, mobile (iOS/Android) and API assessments, plus reverse engineering and offensive exploitation, reflected by top rankings on HackerOne and Bughunt. His recent roles span senior AppSec positions at PicPay and banco BV, where he also led LLM/AI-focused pentesting and secure development enablement for squads. Comfortable across multiple languages (Java, Swift, Go, Python, .NET, JavaScript, PHP), he pairs deep technical analysis with automation to streamline remediation and reduce risk. An avid researcher and competitive security practitioner, he sharpens skills through bug bounties and CTFs, bringing creative offensive insight into pragmatic defensive improvements. Based in Ceará, Brazil, he continually seeks new challenges to evolve organizational security posture and developer practices.
8 years of coding experience
3 years of employment as a software developer
Graduação Engenharia de Computação, Graduação Engenharia de Computação at Instituto Federal de Educação, Ciência e Tecnologia do Ceará