João Augusto Tonial Laner

Address: Av. Doutor Salvador França, 1070, Porto Alegre, Jardim Botânico, 90690-000, RS

Contact:joaoaugustolaner@proton.me | +55 (51)981408109

Projects: Github

Summary

Security-focused Software Engineer with a specialized background in Cloud Security, Data Engineering and Full-Stack development. Proven track record at Thoughtworks of migrating legacy architectures to AWS, optimizing CI/CD velocity using modern tooling (uv, Vite), and championing TDD and DevSecOps principles. Specialized in building resilient, high-performance systems while maintaining a strict security posture in data-sensitive environments.

Experiences:

Cyber security engineer | Thoughtworks

January 2025 - January 2026

Part of a lean, 3-person team managing cloud security and detection engineering for 20+ microservices.

• Maintained 20+ services with AWS Lambda, using Terraform to provision/decomission all infrastructure.
• Improved CI/CD performance by optimizing Github Actions flows to use uv.
• Championed adoption of TDD (Unit and Functional) to enhance development safety net.
• Integrated SAST and SBOM tools into Github Actions providing full visibility of software supply chain risk and code quality.
• Architected services to meet “low-budget” constraints without compromising security posture.
• Monitored pipelines for RCA(Root Cause Analysis) for complex systems involving external APIs and IPs monitoring tools. Ensure all microservices to be resilient against anomalies and outages.

Data engineer | Thoughtworks

April 2023 - December 2024

• Migrated on-premise SQL Server database to an AWS native environment for Brazil’s largest cosmetics company, using AWS Glue, AWS Athena, AWS S3 and AWS Lambda.
• Implemented quality gates to ensure data quality across the different stages of the pipeline.
• Championed data Protection and process security enabling the team to use AWS Secret Manager and RBAC.
• Engineered complex queries with PySpark, ensuring efficiency and parallelism to process high volumes datasets (70gb ~ 145gb).

Full-Stack Developer | Thoughtworks

Oct 2021 - Nov 2022

• Hardened the software supply chain by executing a migration from npm to Yarn, specifically to mitigate risks from known registry vulnerabilities and improve lockfile integrity.
• Modernized the frontend build system by transitioning from Webpack v4 to Vite. Reducing the local development testing from ~1min16s to ~26s.
• Created template components with TDD ensuring component behaviour.
• Championed security, conducting dependency auditing and advocate in favor of security best-practices like: trunk based development, feature flags, pre-commit hooks and secret management.

Education

Bachelor of Science in Computer Science | Unisinos

São Leopoldo, Brazil - Jan, 2025

DevOps Professional - LinuxTips

Certification - In progress

Projects

MapFemRS

• MapFemRS is a initiative to throw light in the femicide problem we have in Rio Grande do Sul. The goal of the project is to create an API that can displays information better and also provide more legible formatting (either for humans of bot parsers) to consult.

• Github