Freelancer profile translated to English.

Description

OT/ICS cybersecurity specialist focused on technical audits and assessments in industrial and critical environments, as well as pentesting (including IT/OT convergence). Over four years evaluating the real-world security of plants, infrastructures, and operational networks, where a failure compromises not just data, but business continuity and physical process safety.

My goal is to uncover the real exposure of your OT environment to provide you with actionable, prioritized, and defensible findings.

What I do:

Technical audits and security assessments in OT/ICS environments (grey-box and black-box).
Pentesting of converged IT and OT systems, devices, protocols, APIs, web applications... with a methodology focused on not impacting business operations.
Evaluation of IT and OT exposure and attack paths (segmentation, remote access, pivoting).
Analysis of industrial protocols (Modbus, S7comm, and others) and identification of critical operations on PLCs to implement an IDS, industrial SIEM, etc.
Reports with scored findings (CVSS), evidence, and remediation roadmaps aligned with IEC 62443 and NIST CSF.

How I work:

First, I understand your process and your operational constraints. The goal is to find what an attacker would find, without me becoming the incident. I work with leading industry technologies (Claroty, TXOne, Kaspersky KICS, CrowdStrike, Fortinet, Stormshield, Suricata) and hold manufacturer certifications and specific training in industrial security (IEC 62443, certification from the Spanish Industrial Cybersecurity Center).

If you need to know how exposed your industrial environment is now that NIS2 is mandatory, I can help you.

Industry field of expertise

Languages

Spanish
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Madrid (up to 50km)

INTEGRACIÓN TECNOLÓGICA EMPRESARIAL, S.L.
Cybsersecurity Specialist
INTERNET OF THINGS (IOT)
March 2022 - Today (4 years and 3 months)
Madrid, Spain
OT/ICS cybersecurity specialist with cross-functional responsibilities spanning architecture, operations and consulting.

Design and deployment of secure industrial network architectures, including segmentation and zoning aligned with IEC 62443.
Design and implementation of open-source SIEM solutions in industrial environments, working with OT protocol decoders and developing custom detection rules tailored to client needs.
Deployment and operation of multi-vendor EDR solutions, industrial firewalls, IDS/IPS with ICS protocol integration, and SIEM platforms with OT-specific use cases.
Penetration testing and security assessments across hybrid IT/OT environments. Development of Python-based PoCs for IDS signature validation and attack vector verification.
Management of a scenario-based risk and exposure management platform for large IBEX35 clients: attack path analysis and risk prioritization across on-premise and cloud environments.
Pre-sales support and business development for industrial cybersecurity services.
Design of industrial cybersecurity testbeds and process monitoring solutions with embedded security capabilities, alongside participation in R&D initiatives focused on industrial anomaly detection.
Firewall OT Cybersecurity