Fernando DamasioSenior QA Engineer · SDET · Quality Engineering

I do not just test software.I engineer confidence so it can evolve.

For over seven years I have worked in quality engineering for mission-critical systems. I operate across automation, APIs, software development, data, CI/CD, observability, and security to turn technical risk into evidence and confidence for release decisions.

  • 7+ years in software quality
  • Mission-critical financial systems
  • Java · Selenium · RestAssured · Cucumber
  • Python · SQL · Docker · Linux · CI/CD
7+

years engineering software quality

70%

more efficiency from a Python tool I developed

API → UI

quality from the contract to the final experience

How I think

I start with risk, not a script.

Before I automate, I understand the product, its impact, and what cannot fail. Then I turn that reading into coverage, code, and observability.

quality-pipeline.yml

PASS
01risk_model: critical_paths
02api_contracts: verified
03regression_suite: green
04observability: connected
05release_confidence: ready
01

Understand

I translate product and business into verifiable behavior.

02

Prioritize

I focus coverage where risk and impact are highest.

03

Automate

I build fast feedback across UI, APIs, data, and regression.

04

Observe

I connect testing, performance, and production to keep learning.

Skills in context

I would rather show how I work than list tools.

Pick a skill to see how I apply it and what evidence it produces.

I start by asking what cannot fail, and only then write a test.

How I apply it

  • I map the impact of each flow before deciding where to invest coverage.
  • I turn business rules into verifiable behavior, not click scripts.
  • I record the risk I chose to accept, so the release decision stays explainable.

Where I built thisLarge-scale financial systems · Stefanini

Evidence I producerisk → coverage
flow: account-to-account transferimpact: financial · irreversiblerisk: duplicate on retry → highrisk: error message leaking data → mediumdecision: contract + concurrency before UI
Test designRisk analysisBDDAcceptance criteria
Security Engineering

I test like an engineer. And I also think like an attacker.

Quality and security meet at the same point: understanding how a system can fail before it happens in production. I apply an offensive mindset to applications, APIs, authentication, authorization, and critical flows.

My goal is not only to ask whether a feature works. I also want to know what happens when someone uses the system in a way it should never allow.

Where I apply a security mindset
API Security Testing
Authentication & Authorization
OWASP Top 10
Input Validation
Session & Token Analysis
Threat Modeling
Secure SDLC
Offensive Testing Mindset
security-assessment.local
secure/local
fernando@security$map --attack-surface
Waiting for assessment...

Experience

I built my view of quality inside systems that cannot fail.

2019 — 2026

01

Current experience

Senior QA Engineer / SDET

Bradesco Project BIA · mission-critical financial systems · Quality Engineering · automation · APIs

I work in quality engineering for mission-critical financial systems and conversational journeys, contributing from refinement and risk analysis through test strategy, automation, and release validation. I design and maintain automation with Java, Selenium, RestAssured, and Cucumber across UI, APIs, integrations, and business rules. I structure BDD scenarios, regression coverage, and end-to-end flows, investigate failures across interfaces, services, and data, and support quality decisions with technical evidence. I also contribute to framework evolution, code review, suite stability, and integration of testing into the software development lifecycle.

Java · Selenium · RestAssuredCucumber · Gherkin · BDDAPI & Contract TestingE2E · Regression · IntegrationRisk-based TestingTest Strategy · Quality EngineeringCI/CD · Git · Code ReviewSQL · Data Validation
02

Dec 2019 — Mar 2022

QA Engineer / Test Automation

Global Hitss API testing · cloud environments

I automated and validated REST API tests in cloud environments with a focus on data consistency, implemented regression testing and critical validation for production systems, and developed an internal Python tool that increased the team's data-analysis efficiency by 70%.

REST APIsPythonRegressionData consistency
03

Jan 2019 — Dec 2019

Software Developer

Foursys Backend development · Banco Next

I developed Java and Spring Boot backend services for the Banco Next mobile application and contributed to the project's initial phases, directly supporting the product launch inside an agile squad.

JavaSpring BootAgile squad

Case studies

I use my projects to turn knowledge into products.

Every project below is mine. I describe the problem, the decisions I made, and the risks I had to handle.

Current stage: Completed project

CyberAudit Pro

I built a SaaS that consolidates public security signals about a domain and turns them into a report a non-technical reader can act on.

Problem

Security signals exist across many public sources, but they arrive scattered, in different shapes, with no sense of priority.

My contribution

I am the sole developer. I implemented authentication, the external integrations, the security score, branded PDF reporting, and the Linux server operation.

Engineering decisions

  • I isolated every external integration behind its own layer, because each API has different limits, latency, and error shapes.
  • I treated third-party downtime as an expected report state rather than a product failure.
  • I separated tenant data from the first version instead of paying that debt later.

Risks I had to handle

  • Data leaking across tenants
  • A report generated from partial sources without telling the user
  • An external dependency going down mid-audit
Node.jsExpressMongoDBPuppeteerNginxPM2Certbot

Independent product · live integrations · operated by me on a VPS

Quality Lab

Enter my Quality Lab. Here, quality stops being a claim and becomes a decision.

Investigate simulated incidents, choose a strategy, and see how I connect risk, engineering, and product. Then try my local feature analyzer.

INTERACTIVE EXPERIENCE · REAL QUALITY DECISIONS

Do not just read what I do. Make a decision with me.

Enter an engineering control room, investigate failure signals, and see how I turn risk into release confidence.

QUALITY SYSTEM / ONLINEFD / LAB 02

Select a station or choose a guided experience.

LOCAL DEMO · NO DATA IS SENT
01Context
02Risks
03Coverage
04Validation

This is the same path I would follow in a refinement session: understand, map risk, define coverage, and validate the output.

This demo runs entirely in your browser, using rules I wrote. There is no external model call and nothing is transmitted.

FERNANDO / QUALITY AGENT
LOCAL DEMO · NO DATA IS SENT

Ask about my experience

I turn recurring risks into automated feedback using Java, Kotlin, Selenium, BDD, and API validation. My priority is a suite that is readable, stable, and useful for release decisions.

Source in my résumé: Experience · Stefanini
Professional portrait of Fernando Damasio
Fernando Damasio · Senior QA Engineer · SDET

About me

I build confidence because I understand both sides of software.

My career started in backend development with Java and Spring Boot and evolved into quality engineering for mission-critical systems. Over the years, I have deepened my work in test automation, APIs, BDD, data, performance, CI/CD, and technical failure investigation.

Today I combine quality, development, and security. I work from the user interface to APIs, databases, and infrastructure, using that perspective to investigate risks beyond the happy path. In my own products, I apply architecture, testing, Linux, cloud, security, and operations from the first commit to deployment.

Education

  • Software Quality Engineering — EBAC
  • Technical Diploma in Systems Analysis — UNINOVE

Languages

  • Portuguese — native
  • English — intermediate (working technical reading)

Let's talk

If quality is an engineering decision, I want to be part of it.

I am open to opportunities in QA, SDET, and Quality Engineering, especially in environments that value automation, APIs, engineering, CI/CD, security, and quality as part of software development.

I read every message and reply personally.