Thiago Navarro's CV
- Email: thisago@disroot.org
- Location: Remote
- Website: blog.thisago.com
- GitHub: thisago
About
Security-focused generalist engineer. Depth in many niches, from IoT, pentesting, user privacy, infra and reverse engineering. Converging now full-stack day-job experience with with offensive security passion.
Skills
Expertise: Offensive/Defensive Security, Engineering, Reverse Engineering, Unix-like Internals, Airgapping, Data Scraping, Self-Hosting, ...
Tools: C++, Python, Go, Nim, Bash, JavaScript, QubesOS, PostgreSQL, MongoDB, OpenTofu, Guix, K8s, ...
Security Research
Reverse-engineering airline check-in API to cancel seat selection
Mar 2026
blog.thisago.com/story/20260329-cancellingFlightSeatSelection.html
Airgapped Android: Full Termux environment in LineageOS, never online
Jan 2026
blog.thisago.com/announcement/20260104-phoneSetup1.html
Systems and Infra
thiscloud
Apr 2026 – present
Talos single-cluster Kubernetes managed via OpenTofu and FluxCD on Vultr.
blog.thisago.com
July 2023 – present
Personal engineering blog: reverse-engineering write-ups and systems tutorials. Selected posts:
Experience
Tech Lead
São Paulo, Brazil (remote)
Mar 2026 – present
seed-level startup
Senior Software Engineer
São Paulo, Brazil (remote)
Mar 2024 – June 2025
seed-level startup
Self-directed
Remote
Apr 2023 – Mar 2024
Independent Open Source maintainer and research
IoT and Full Stack Engineer
São Paulo, Brazil
Feb 2019 – Mar 2021
micro company
Certifications
Profissional Pentest
2019
Solyd (verify)
Pentest Introduction course
2019
Solyd (verify)