BernardoGomes

Software engineer building digital products where technology, media and community meet.

Selected Work

Projects

2025Featured

TurisIA

AI-powered accessibility tourism platform created during a Google Cloud Hackathon. Explores how people with disabilities can plan and experience tourism more safely through conversational AI.

Designed around the idea that accessibility information in tourism is often incomplete or unreliable. TurisIA proposes a conversational assistant capable of interpreting user needs and explaining why a place is accessible — not just listing locations.

Top 5 — Google Cloud HackathonSocial impact & product thinkingAI applied to accessibility

Google Cloud · Vertex AI · Google Maps · Places API · Conversational AI · Product Design

Case Study

2026Featured

Virou Aí?

Full-stack event discovery platform for São Paulo's nightlife — from automated web scraping and data normalization pipelines to a premium SSR interface with 60+ components. Built solo, in production.

Resilient multi-stage scrapers, idempotent upserts with smart deduplication, heterogeneous data normalization, Google OAuth with Supabase RLS, and a custom dark design system. Automated ingestion pipeline running on GitHub Actions 2×/week.

Production-grade fullstack — built solo4-stage data pipelineSSR with Next.js 16 — TTI < 1s

Next.js 16 · React 19 · TypeScript · Tailwind CSS 4 · Framer Motion · Supabase · PostgreSQL · GitHub Actions · Web Scraping

View Repository

2025

Future.WORK

Conceptual professional networking platform combining frontend and backend layers to simulate a lightweight digital professional network.

React · Vite · Tailwind CSS · FastAPI · MongoDB · REST API

View Repository

2025

Smart Workspace Sensor

IoT system designed to monitor environmental conditions in remote workspaces — evaluating comfort, fatigue risk and workspace quality in real time.

ESP32 · MQTT · Node-RED · C++ / Arduino · IoT Sensors

View Repository

2024

Real-Time Rendering Tooling

Experimental scripting and runtime analysis project focused on real-time rendering logic, visibility checks and performance-oriented visual systems.

Lua · Runtime Analysis · Rendering Logic · Performance Tooling

2026

Security Research & Vulnerability Assessment

Authorized White Hat Testing

Conducted authorized security assessments on production web platforms, identifying and responsibly disclosing critical vulnerabilities across authentication layers, API design and data exposure surfaces.

CriticalSession token exposure via misconfigured NextAuth callbacks

CriticalCORS wildcard combined with session endpoint enabling full Account Takeover

HighBroken Object Property Authorization on user-facing endpoints

HighExcessive PII exposure on unauthenticated public endpoints

MediumCSRF protection bypass via public token endpoint

MediumUnauthenticated enumeration of unpublished resources

LowInput validation gap causing account-level DoS

OWASP API Top 10 · NextAuth.js · REST API · CORS · CSRF · Broken Object Authorization · Responsible Disclosure · LGPD

Reflections

Engineering Thinking

Designing Accessibility as a System Constraint

Insights from designing TurisIA and how accessibility must be treated as a system constraint rather than a simple UI feature.

Accessibility · Product Thinking · AI Systems

Separating Frontend and Backend for Learning Architecture

Why Future.WORK was intentionally split into independent frontend and backend layers to simulate real product architecture and development workflow.

Architecture · API Design · Full Stack

Sensor Telemetry and Real-Time Feedback Loops

Reflections from building an IoT sensor pipeline using ESP32, MQTT and Node-RED.

IoT · Telemetry · Real-Time Systems

Thinking Like an Attacker to Build Better Systems

Mapping attack surfaces in modern REST APIs requires stepping outside the developer mindset. Every endpoint is a contract — and contracts can be exploited. This reflection explores how systematically modeling threat surfaces, following the OWASP API Top 10 and applying responsible disclosure principles shapes better API design decisions from the start, not as an afterthought.

Security · API Design · Responsible Disclosure

Background

Qualifications

2025 — Present

Bachelor's Degree in Software Engineering

FIAP — São Paulo, Brazil

Software Engineering undergraduate program focused on modern software development, system architecture and digital product design.

GitHub · JavaScript · Software Development · Web Systems

2025

Top 4 — FIAP & Google Cloud Hackathon

GEN AI: Desafios da Nova Era da Inteligência Artificial

Recognized among the top projects for proposing an AI-driven accessibility solution through the TurisIA concept.

View Certificate

2023 — 2024

Independent Digital Commerce & Reselling

Worked autonomously buying, selling and reselling digital and physical products in online marketplaces. Handled international purchasing, sales negotiation, customer communication and post-sale support.

Client Interaction · Negotiation · Operations · Problem-Solving

Ongoing

Fluent English

Advanced English proficiency developed through technical work, content creation and direct international engagement. Participated in interviews and dialogues with international professionals and casters in Riot Games tournaments — demonstrating the ability to communicate clearly under professional pressure in a second language.

English · International Communication · Technical Writing · Public Speaking

Certifications

AI & Cloud Certifications

Completed foundational training in Artificial Intelligence and Generative AI through Google Cloud learning programs, focusing on responsible AI, large language models and prompt engineering.

Applying AI Principles with Google Cloud

Google Cloud · Completion Badge · 2025

Prompt Design in Vertex AI

Google Cloud · ML & AI Skill Badge · 2025

Introduction to Responsible AI

Google Cloud · Completion Badge · 2025

Introduction to Large Language Models

Google Cloud · Completion Badge · 2025

Introduction to Generative AI

Google Cloud · Completion Badge · 2025

View full certification profile on Google Skills

These certifications supported experimentation with AI systems used in projects such as TurisIA.

Background

About

I'm a Software Engineering student based in São Paulo, focused on building digital products where engineering, usability and product thinking come together.

I'm especially interested in frontend systems, interface quality, applied AI, real-world product design and the intersection between technology, media and community ecosystems.

I care about clarity, performance, strong user experience and the details that turn a functional product into something memorable.

Presence

Media & Gaming Ecosystem

Alongside software and product development, I'm active in gaming and digital media environments. I create live content and community engagement through Trexx, a platform connected to major esports organizations and gaming communities.

This gave me direct exposure to creator ecosystems, audience interaction and how digital communities, media operations and platform experiences work in practice.

I've also actively participated in Riot Games tournaments — engaging in interviews, live dialogues with international casters and key moments at official events.

Product AwarenessCommunicationCommunityMedia ExposureCollaboration

Featured

Fluxo W7M — Creator Session

Participated in a professional production alongside esports personalities and community figures — an experience in large-scale content creation, production workflow and creator coordination.

Watch on YouTube Instagram

Riot Games

Tournament Participation & International Dialogues

Actively present in Riot Games tournaments — participating in interviews, on-stage dialogues with international casters, and key community moments at official events. Navigating high-visibility environments in both Portuguese and English.

Get in Touch

Let's build something
worth remembering.

brnrdcontact@gmail.com

GitHub LinkedIn