Jose J. Lara

I help companies and professionals improve the security of their applications, infrastructure, and digital processes by combining offensive cybersecurity, web and infrastructure pentesting, automation, API integration, applied AI, backend development, and data analysis.

I can help you in three main areas:

**1. Cybersecurity and pentesting**: attack surface review, web and infrastructure pentesting with Burp Suite, SQLMap and other tools, vulnerability validation, evidence, technical reports, hardening, exposure analysis, vulnerability management, and mitigations.

**2. Automation and applied AI**: development of scripts and tools adapted to the project's language and stack, with Python as the main specialty. I work with APIs, Excel/CSV/PDF, dashboards, bots, legal scraping, reporting, data processing, internal assistants, integrations between tools, and task automation.

**3. Technical tooling and advanced analysis**: backend development, internal tools, data pipelines, financial analysis, backtesting, walk-forward validation, risk metrics, commission/slippage modeling, applied machine learning, and algorithmic trading.

I developed Web Ninja, my own framework for bug bounty and security research with a web dashboard, database, integration with Burp Suite via Java extension, subdomain modules, scanning, alerts, and evidence collection.

I also developed an algorithmic trading bot in Python with real-time data, exchange connection, backtesting, walk-forward validation, execution costs, spread, slippage, commissions, risk metrics, structured logs, and comparison between simulation and real execution.

I analyze the problem, simplify processes, and deliver maintainable and documented solutions.

Available for remote projects in Spain and Europe, with occasional in-person meetings in Madrid if the project warrants it.