Engineering Lead with over nine years building mobile, web, AI, and developer-tooling systems. I've worked from early-stage products to platforms at Coinbase, Meta/Kustomer, D-ID, AB InBev, and Morgan & Morgan.
I lead teams and still stay close to the code. Security is part of that work: threat modeling, identity and authorization, secure file handling, and CI/CD hardening.
- Reproduced and closed a stored-XSS path at the R2-to-site asset boundary.
- Made OTP consumption atomic under concurrency, with 25 regression races proving one success and one rejection.
- Bound signed image-upload grants to the requesting user, including exact byte-size signatures, expiry, quotas, and cleanup. More public work and context: gabrieltaveira.dev/security
Follow me at my socials: gabrieltaveira.dev/links
