// tech lead · appsec & frontend/mobile
Lucas Rocha
I lead engineering teams and build secure, scalable frontend and mobile platforms — from architecture to threat modeling.
About
I'm a technology leader and application security specialist based in São Paulo, with experience across software engineering, application security, frontend architecture, mobile architecture, and cloud-native environments.
My background spans fintech, edtech, and enterprise projects, leading initiatives focused on scalability, resilience, performance, and security — from Secure SDLC and threat modeling (STRIDE, DREAD) to SAST/DAST and internal security tooling.
I care about technical leadership as much as the code itself: mentoring, code review, architectural design, and building a culture where security is part of how a team ships, not an afterthought.
Skills
- Languages
- Python · JavaScript/TypeScript · Golang
- Frameworks & libraries
- React · React Native · Jest · RTL · Vitest
- Security
- Secure SDLC · SAST · DAST · Threat modeling (STRIDE, DREAD)
- Tools
- Git · Datadog · Snyk · Aikido.dev · Gitleaks · TruffleHog · Burp Suite
Education
- Postgraduate Degree in Cybersecurity
- FAMEESP · 2026
- Systems Analysis and Development
- UNESA · 2020
Experience
Career progression from full-stack development into technical and engineering leadership.
Engineering Manager · Trinca
Lead and mentor engineering teams for the FairFax account, guiding architecture, AI, and cybersecurity decisions while embedding DevSecOps into the delivery lifecycle.
Tech Lead · CRM Bônus
Led frontend, backend, mobile, and QA squads for the Vale Bônus business unit — cut frontend incidents by 80% and introduced Datadog observability.
Engineering Lead · Porto Seguro
Led the frontend chapter at the Hub de Vendas, setting engineering standards, architecture guidance, and secure development practices across multiple squads.
Frontend Specialist · Árvore
Drove accessibility (WCAG) initiatives and engineering best practices that cut bug reports by 20% on a platform serving thousands of active students.
Tech Manager · BeCapital
Managed technical teams and delivery for an investment platform, reaching 100% LGPD compliance in secure coding practices.
Senior Software Engineer · BeCapital
Defined system architecture, introduced a unit-testing culture, and automated manual workflows with Power Automate and PowerApps.
Mobile Developer · Target Bank
Migrated the Target Conta Digital app from native Android (Java) to Flutter and shipped new cross-platform features.
Mid-level Software Engineer · Stone
Built and maintained logistics systems (Dash, Cérebro) powering the company's key operational indicators.
Full-stack Developer · TV Escola
Built and supported closed-caption systems and internal engineering tools for public television, driving accessibility compliance.
Projects
Personal projects built outside of work — code speaks louder than bullet points.
State.
A software engineering, AppSec, and data consultancy — helping teams ship fast, secure, well-built products, no corporate jargon.
AppSec · DevSecOps · Consulting
Sevnes Silabi
A conversion-focused landing page for a private English speaking coach — built to book diagnostic classes for professionals who freeze up the moment a real conversation starts.
Next.js · Landing Page · EdTech
Juliana's Portfolio
A portfolio site designed and built for Juliana, an Analytics Engineer — data pipeline case studies and an interactive, stage-by-stage data flow diagram.
Next.js · Tailwind CSS · Portfolio
VibePass
A landing page for a nightlife discovery app — connecting people to bars, clubs, and each other based on shared vibe, currently building its beta waitlist.
Next.js · Landing Page · Nightlife
terminal.faith
A personal blog with a terminal-inspired aesthetic — short, honest reflections on faith, written in dark, monospace minimalism.
Next.js · Blog · Faith
Weiss & Vermilion
A landing page for an urban sci-fi duology by author Vinícius Louzada — universe and character breakdown, reader reviews, and purchase links for both books.
Next.js · Landing Page · Publishing
Want the short version?
Download a one-page PDF with experience, stack, and contact details.
Contact
Open to technical leadership and application security roles. Book a call, or connect on LinkedIn.