I operate and harden production systems, and I research how they break. Two halves of the same job.

• 7+ years running Linux/Cloud production for Brazilian enterprise clients (Madero, OAB, Ingresso Digital at CentralServer): thousands of servers, 99%+ uptime, on-call rotation, automation-first.
• Co-founder at Cyberforce Security building an AI-assisted pentesting platform with autonomous LLM agents (FastAPI + Kubernetes + LiteLLM + RAG + MCP).
• Public exploit development: PoC for CVE-2017-14980 — full reversing, shellcode, mitigation.
• AI tooling security research: proof-of-concept attacks on LLM coding assistant runtimes (ClaudeStealer).
• Studying towards DCPT (DESEC NPP course active) · AWS Certified Cloud Practitioner.

Security tooling: Burp Suite · Metasploit · Nmap · Wireshark · ProjectDiscovery (subfinder/httpx/nuclei) · ffuf · BloodHound · Wazuh · SonarQube · Snyk

Methodologies: OWASP Top 10 · OWASP API Top 10 · MITRE ATT&CK · Cyber Kill Chain · Diamond Model · PortSwigger Academy

• Exploit_Sync_Breeze CVE-2017-14980 — Public PoC: stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 (/login username parameter). Reversing, shellcode, reproduction.
• ClaudeStealer — Research on attack surface in LLM coding assistant runtimes.

• SSH_C2C — Command-and-control over SSH protocol, multi-host orchestration.
• CNPJHarvest — Brazilian corporate OSINT pipeline.
• ShinobiRecon — Reconnaissance automation.

• SysAdmin-Toolkit — Linux automation for provisioning, hardening, monitoring.
• terraform-security-baseline — publishing this week · Hardened AWS baseline (IAM least-privilege, S3 SSE-KMS, CloudTrail, security groups, KMS rotation) with tfsec + checkov CI.
• k8s-security-hardening — publishing this week · Pod Security Standards, NetworkPolicies, OPA Gatekeeper, Falco rules, Cosign verification.

• DCPT-Studies-Notes — Public study log for DESEC Certified Pentester.

Email: lturossi at proton dot me · GitHub: @xn0kkx

Open to remote Security Engineer / DevSecOps / AppSec / AI Security roles · US/EU overlap · Brazil-based