Freelancer profile translated to English.

Description

Extensive experience in cybersecurity, mainly specialized in ethical hacking, pentesting, and vulnerability analysis. Also in the design and implementation of secure software development S-SDLC. I also implement SAST tools (VERACODE/Checkmarx/GitHub Advanced Security) and DAST (Acunetix/BrightSec), as well as execute security project management, experience in DevOps/DevSecOps. BlueTeam knowledge with the use of SIEM, EDR like WAZUH and TrendMicro, Pfsense. Development of secure development workshops and security awareness training for users through phishing techniques. Likewise, I manage firewalls (Fortinet, Juniper, Checkpoint), support for Windows, Linux servers, and SOC operations. This, added to the knowledge in GRC for Information Security Management Systems as an Internal Auditor, Implementer, ISO 27001.

Currently, I provide freelance services in ethical hacking and security training for users.

Industry field of expertise

Languages

Spanish
Native or bilingual
English
Conversational
French
Conversational

Workplace preferences

Can work on-site

Madrid (up to 50km), Barcelona (up to 50km), Bilbao (up to 50km)

SILBOMoney (Fintech)
SECURE DEVELOPMENT - Internship, Information Security
March 2025 - May 2025 (2 months)
Madrid, Spain
• Conduct white-box security testing on applications.
• DevSecOps security advice and development.
• Agile methodologies.
DevSecOps Cybersecurity secure development
ENTELGY (Financiero)
Ethical Hacker | Security
April 2019 - December 2019 (8 months)
Lima, Peru
• Conduct Ethical Hacking, Pentesting, RedTeam tests.
• Audit Windows, Linux servers, Firewalls.
• Conduct Social Engineering, Phishing, Vishing, Smishing tests.
• Support clients in vulnerability resolution.
Pentesting Cybersecurity Ethical Hacking Social Engineering
RIMAC SEGUROS (Seguros)
RED TEAM ENGINEER EXPERT, Information Security
December 2019 - December 2024 (5 years)
Lima, Peru
• Conduct Ethical Hacking, Pentesting, RedTeam, Wireless Penetration Testing (OWASP TOP TEN, OWASP Testing Framework) tests.
• Audit Windows, Linux servers, Firewalls.
• Manage vulnerability remediation with different teams.
• Implementation and Management of the Secure Software Development Lifecycle (S-SDLC).
• Implement information security projects (SAST - Checkmarx, DAST, Secure Development, Secrets Management, etc.).
• DevSecOps security advice and development.
• Advice, development, and accompaniment in security aspects for development teams and new development projects.
• Conduct Secure Development workshops for programmers.
• Agile methodologies.
Ethical Hacking DevSecOps Pentesting secure development SAST