---
title: "Experience — Matheus Theodoro"
description: "Roles at Adapta, Avenza Security, Avenza Cloud, Marketisa. Projects: RedThread, WindWhisper."
url: https://matheus.theodoro.dev/experience
---

# Experience — Matheus Theodoro

> AI Security Engineer at Adapta. Experience across AI security, cloud engineering, and DevSecOps.

## AI Security Engineer — Adapta

2026 — Present

Working on AI security.

Link: https://adapta.org

## Founder & AI Security Engineer — Avenza Security

2024 — 2026

Founded and ran a practical AI security practice for companies shipping LLM applications, agents, and AI-enabled products.

- Built OSlit — an autonomous security agent for testing blockchain systems
- Ran adversarial campaigns using PAIR, TAP, Crescendo, GS-MCTS across 4+ attack objectives
- Implemented JudgeAgent/G-Eval scoring with OWASP LLM and MITRE ATLAS categories
- Built defense synthesis pipeline: exploit trace → scoped guardrail → replay validation → promotion evidence
- Delivered AI red-team assessments, prompt injection testing, and agentic security reviews for multiple clients

Link: https://github.com/matheusht/redthread

## Software Engineer II — Avenza Cloud

2022 — 2026

Building secure cloud infrastructure and backend systems for SaaS platforms operating at scale.

- Architected backend APIs and cloud infrastructure serving 10+ clients with 99.9% availability
- Designed and maintained AWS/Kubernetes deployments with mTLS, RBAC, and secure data storage
- Built telemetry and monitoring pipelines using Elastic Stack for distributed systems observability
- Implemented CI/CD pipelines and secure SDLC practices across the engineering stack
- Protected $2.8M+ in client revenue through infrastructure reliability and security controls

## DevSecOps / Software Engineer — Marketisa

2020 — 2022

Integrated security practices into the software development lifecycle and cloud operations.

- Implemented secure SDLC practices including credential handling, input validation, and access controls
- Built and maintained cloud infrastructure with monitoring, alerting, and incident response
- Developed backend services and APIs with Python and JavaScript across distributed systems
- Established security review processes for code deployments and infrastructure changes


## Notable Projects

### RedThread / OSlit

CLI-first autonomous AI red-teaming and defense-evidence engine for LLM and agentic systems. Runs PAIR, TAP, Crescendo, and GS-MCTS campaigns; scores traces against OWASP LLM and MITRE ATLAS categories; converts confirmed failures into replay-validated guardrails.

GitHub: https://github.com/matheusht/redthread

### WindWhisper

NASA Space Apps 2025 global nominee and local 1st place. AI-powered wind prediction combining computer vision, backend data pipelines, and real-time inference.