---

🕶️ About Me (Def3nse style)

const bob = {
  alias: "Att4ck and Def3nse",
  focus: ["Secure Software Development", "Threat Modeling", "AppSec Automation", "Cybersec"],
  code: ["Python", "Go", "Bash", "C/C++", "Terraform", "YAML", "and more..."],
  devSecOps: ["SonarQube", "SAST/DAST", "Azure DevOps", "GitHub Actions", "GitLab CI"],
  threatModeling: ["OWASP Threat Dragon", "STRIDE", "MITRE ATT&CK"],
  philosophy: "Segurança é cultura e não um Checklist.",
  funFact: "Prefiro logs a PPTs e já automatizei até café ☕ (quase...)",
  effect phrase: "Difícil é aprender a ler, o resto está escrito..."
}

---

💻 What I Do

# Investigação & Red Team
└─$ nmap -A target.corp
[+] Open ports found: 22/ssh, 443/https
[+] Weak cipher detected...

# Threat Modeling
└─$ curl -s threats.md
[+] Identifying misuse cases...
[+] Simulating insider attacks...
[+] Mapping STRIDE to OWASP Top 10...

# DevSecOps
└─$ cat pipeline.yml
stages:
  - build
  - test
  - sast
  - dast
  - deploy

---

🛡️ Skills & Tools

• DevSecOps: Azure DevOps · GitHub Actions · GitLab CI · Terraform · Kustomize
• Threat Modeling: OWASP Threat Dragon · STRIDE · LINDDUN · MITRE ATT&CK
• AppSec: SAST · DAST · Secure Code Review · Secrets Detection
• OSINT & CTI: OpenCTI · MISP · Maltego · EnumDNS · ThreatFox
• Infra & Cloud: Kubernetes · Docker · Linux (Kali, Debian, Oracle, Azure, OCI)

---

📊 Coding Stats

---

🌐 Connect with me

---