Marcelo Gimenes de Oliveira
Verified Expert in Engineering
Software Engineer and Developer
Marcelo可以采用高级目标并提供可发布的代码. To do so, he can readily learn most technologies as he goes. 他关心他所创造的任何东西的商业含义, and he understands the balance between craft, speed, and the bottom line. 此外,他认为技术是工具和权衡,而不是意识形态. Marcelo在许多技术和业务领域拥有超过8年的可扩展应用程序构建经验.
Portfolio
Experience
Availability
Preferred Environment
Linux, Git
The most amazing...
...我开发的项目是一个安全漏洞管理应用程序,它改善了巴西最大的金融科技公司之一的安全团队的工作流程.
Work Experience
Senior Software Engineer
Jobvite
- 集中了分布在不同模块中的公共列表特性.
- Improved IaC features using SparkleFormation; Developed an internal feature to run one-time jobs on Kubernetes.
- 使用Logstash、Kibana和Elasticsearch改进了应用程序日志索引.
- Added many new features using React/Relay and GraphQL (Ruby).
- 重构了一个用React编写的求职者门户的代码.
- 将一些应用模块从裸机迁移到Kubernetes.
Lead Software Engineer
BoaCompra
- 开发了一个新的API版本,通过使用最佳REST实践来提高可用性.
- 创建了一个API网关库,可以轻松地按需构建API网关.
- Designed a sandbox solution to improve client onboarding.
- 帮助新成员了解公司的商业模式,掌握公司的代码规则.
Application Security Engineer
BoaCompra
- 对100多名同事进行了基于OWASP标准的网络安全培训.
- 映射和渗透测试整个系统的攻击面,以满足PCI义务.
- Wrote handcrafted reports, 它不仅指出了安全漏洞,而且给出了缓解的指示和最佳实践.
- 就开发团队当时正在开发的特性向他们提供具体的安全建议.
- Defined model risk of new features, microservices, and APIs.
- Managed the security vulnerabilities to meet deadlines.
- 在交付后测试新的缓解和安全功能,看看是否没有绕过的方法.
Software Engineer
BoaCompra
- Broke a core part of a monolith into a resilient microservice, which improved the development process of adding new features.
- 开发了新的退款请求UI,提高了可用性.
- 建立了一个新的结账微服务,将转化率提高了10%.
- 创建了许多可重用库,以提高开发速度和可读性.
- 使用旧框架和遗留系统,如osCommerce和Tomato.
- 使用和推广领域驱动的设计技术以及SOLID和Clean Code实践,以提高代码的可维护性.
System Analyst
Benner
- Analyzed and described requirements for the new features.
- 针对每个特定客户的需求创建了许多不同的功能.
- 开发COM对象,通过可重用组件增加系统功能.
Software Developer
TecnoSpeed
- 在现有API的基础上创建一个REST API,在不更改旧代码的情况下改进其特性.
- Developed a new UI, improving both usability and performance.
- 发现并修复了一个导致重大随机问题的旧bug.
- 开发了一种新产品,提高了客户在其主要业务领域的整体弹性.
- 创建dll和COM对象以促进新客户端的集成.
- Built and implemented many important invoice-related features, 例如跨字段语义验证和数字发票发送.
Experience
BoaCompra API
BoaCompra专门为超过15个国家提供支付集成服务, 提供来自10个不同国家的近150种支付方式, 使合作伙伴可以用其他货币销售,买家可以使用当地的支付方式. 它是Riot(《欧博体育app下载》)等大型游戏公司的合作伙伴。, Valve (Steam), and EA (Battlefield and Need for Speed).
Vulnerability Management App
http://github.com/cgimenes/appsec-adminFile Transferring through QR Code Images
http://github.com/cgimenes/binqr-serverVeterinary Clinic Management App
http://github.com/cgimenes/gohorse-backendSkills
Languages
PHP, Java, Delphi, Bash, GraphQL, SQL, XML, PHP 7, PHP 5, Go, Python, JavaScript, Ruby, C#, CSS, Visual Basic 6 (VB6), CSS3, HTML5, R, Clojure, HTML, Haskell, Elixir, TypeScript
Frameworks
Ruby on Rails (RoR), ActiveX, PHPUnit, Twig, PhalconPHP, Bootstrap, Spring Boot, Tailwind CSS, Relay, Bulma, AngularJS, ASP.NET, Flask, Spring, Django, .NET Core, .NET
Libraries/APIs
API Development, REST APIs, Node.js, jQuery, React, Vue
Tools
Git, Docker Compose, Jenkins, RabbitMQ, Redmine, Subversion (SVN), NMap, Metasploit, Jira, Amazon Simple Queue Service (SQS), Amazon Elastic Container Service (Amazon ECS), RSpec, Helm, Apache, NGINX, Traefik, SparkleFormation
Paradigms
Microservices, CQRS, Event Sourcing, Requirements Analysis, Agile, Scrum, Kanban, Unit Testing, Object-oriented Programming (OOP), REST, Responsive Web Design (RWD), Penetration Testing, Functional Programming, ETL, DevOps
Platforms
Linux, Docker, Windows, Amazon EC2, Heroku, Kubernetes, Apache Kafka, Android, Oracle, Amazon Web Services (AWS), Google Cloud Platform (GCP), DigitalOcean, Firebase
Storage
SlimPHP, Databases, PostgreSQL, MySQL, MongoDB, PL/SQL, Amazon S3 (AWS S3), Redis, Microsoft SQL Server
Other
Domain-driven Design (DDD), Application Security, Software Engineering, Software Architecture, DLL, COM, Hardware, Software Development, Lean, Networks, Risk Modeling, Vulnerability Assessment, Vulnerability Management, Payment Gateways, APIs, Fintech, Online Payments, Payment APIs, Architecture, Single Sign-on (SSO), Back-end, System Integration, Integration Testing, Web App Security, Web Security, Secure Web Development, OOP Designs, LDAP, Software Design, Risk Analysis, Metabase, Full-stack, Front-end, CI/CD Pipelines, Native Mobile Apps, Inno Setup, Business Psychology, Mathematics, Statistics, QR Codes, Leadership, API Gateways, Amazon API Gateway, Machine Learning
Industry Expertise
Banking & Finance, Security, Cybersecurity
Education
Bachelor of Engineering Degree in Software Engineering
Centro Universitário Cesumar (UniCesumar) - maring
Certifications
Certified Application Security Engineer (CASE)
EC-Council