Freelancer profile translated to English.

Description

I help companies adopt AI without compromising their data or European regulations.

Your employees are already using ChatGPT, Copilot, or Gemini — the question is whether you know what company information is leaving the building. And if you have an AI chatbot or system in production, chances are no one has tested it against specific LLM attacks.

What I do:

· AI Usage Audit: I identify which tools are being used, what sensitive data is exposed, and deliver a ready-to-implement AI usage policy.

· LLM Application Security Assessment according to OWASP Top 10 for LLM Applications: prompt injection, system prompt leakage, unauthorized data access via RAG.

· AI Act Compliance: risk classification of your AI systems and compliance documentation, aligned with GDPR.

Profile: Information Technology Engineer, Master's in Cybersecurity. I deliver clear executive reports: what risk you have, what impact it would have, and what to do, prioritized by cost/benefit.

I start with a free 20-minute call to assess if I can bring you value.

Industry field of expertise

Languages

Spanish
Native or bilingual
English
Fluent
Italian
Basic

Workplace preferences

Remote only

Primarily works remotely

AM Regional UG
Cybersecurity & Application Security Intern
August 2025 - December 2025 (4 months)
Germany
• • Contributed to establishing the foundations of the company's cybersecurity program, defining initial policies and security best practices.
• • Executed vulnerability analyses and security testing on applications with OWASP ZAP and Bandit (SAST), applying the OWASP Top 10 methodology.
• • Documented technical findings and remediation recommendations for development teams.
Banco Pichincha
Risk and Compliance Analyst — Data Protection
January 2025 - July 2025 (6 months)
Ecuador
• • Managed personal data protection incidents and claims for the bank's entire client portfolio, performing functions equivalent to a Data Protection Officer (DPO).
• • Led fraud investigations in coordination with risk and security departments for case resolution.
• • Executed risk assessments and internal regulatory compliance audits.
• • Participated in the development and adaptation of processes in accordance with current personal data protection regulations.
Data Protection Cybersecurity IT Security PMO PDP
SONDA.SA
Data Center, Cloud, and Cybersecurity Technician
January 2024 - June 2024 (5 months)
Ecuador
• • Administered a virtualized data center infrastructure with over 100 servers, serving governmental public entities and private banking (including Produbanco).
• • Managed cloud infrastructure security using VMware, Nessus, and Pentera for vulnerability assessment and remediation.
• • Automated administration and monitoring tasks using Python scripts.
• • Administered Cisco network and perimeter security equipment.
CISO Cloud Cybersecurity Virtualization