Oct 2025 – Present · 7 mos · Andorra · Remote

• I mentor professionals in artificial intelligence, helping them build practical skills in AI automation, and secure system design.

Jun 2025 – Oct 2025 · 4 mos · Remote

Mar 2025 – Jun 2025 · 3 mos · Remote

Nov 2022 – Jun 2025 · 2 yrs 7 mos · Remote

• As a Freelance Penetration Tester, I specialize in managing and executing comprehensive security assessments for web applications, APIs, mobile applications (Android), and both internal and external network infrastructures. My collaboration with renowned security firms like Strike (https://strike.sh) allows me to deliver top-tier security solutions tailored to meet the unique needs of each client.

Jun 2024 – Dec 2024 · 6 mos · Remote

Aug 2022 – Present · 3 yrs 9 mos · Remote

• At Bounty Security (https://bountysecurity.ai), I contribute to the continuous improvement, testing, and effectiveness evaluation of our core security products: Burp Bounty Pro, Burp Bounty Go, GBounty, and Bounty Prompt. My role focuses on identifying enhancements, assessing performance, and ensuring these tools deliver optimal results in real-world cybersecurity scenarios.

Jun 2020 – Present · 5 yrs 11 mos · Remote

• As a Freelance Penetration Tester, I specialize in managing and executing comprehensive security assessments for web applications, APIs, LLMs models, AI automations, mobile applications (Android), and both internal and external network infrastructures. My collaboration with renowned security firms like Cobalt (https://www.cobalt.io) allows me to deliver top-tier security solutions tailored to meet the unique needs of each client.

Jun 2017 – Jul 2020 · 3 yrs 1 mo · Madrid Area, Spain

• Conducted web application security audits to identify vulnerabilities and develop remediation strategies.
• Evaluated API REST and JWT protocols for secure data transmission and access prevention.
• Assessed Android Apps for security weaknesses and potential attack vectors through reverse engineering and code analysis.
• As a Senior Security Analyst at Telefónica, I collaborated with cross-functional teams to implement effective security measures and policies, including thorough source code reviews to identify coding errors and security vulnerabilities. My attention to detail and technical expertise allowed me to provide recommendations to development teams for improving code quality and security.

Feb 2016 – Jun 2017 · 1 yr 4 mos · Santiago de Compostela y alrededores, España

• During my time as a Senior Security Consultant, I gained significant experience in a variety of areas. My work conducting web application security audits and penetration testing, both external and internal networks, allowed me to develop a deep understanding of the vulnerabilities that exist in these systems and how best to address them.
• In addition, I was responsible for conducting malware analysis and reverse engineering, which required a strong ability to identify and analyze complex threats.
• My expertise in analyzing and testing Android Apps allowed me to identify vulnerabilities and suggest improvements to ensure secure data transmission.
• Overall, my experience in this role allowed me to develop a strong foundation in security analysis and testing methodologies, as well as a deep understanding of the security risks faced by modern organizations.

Dec 2014 – Feb 2016 · 1 yr 2 mos · Barcelona y alrededores, España

• I was responsible for a diverse range of responsibilities, these included:
• Project management: I managed multiple IT security projects, from planning and budgeting to implementation and delivery. I ensured that projects were delivered on time, within budget, and to the required quality standards.
• Web application security audits and Penetration Testing: I conducted comprehensive security audits of web applications and performed penetration testing (external and internal) to identify potential vulnerabilities and remediation strategies.
• PCI DSS: I ensured that all relevant systems and applications were compliant with the Payment Card Industry Data Security Standard (PCI DSS).
• WIFI network audits: I conducted security audits of WIFI networks to identify vulnerabilities and recommend security improvements.
• Instructor in Security Courses: I taught security courses, including Secure Programming in Web environments and Web Security, to help train and develop the next generation of security professionals.
• Writing secure programming guides: I wrote comprehensive guides on secure programming practices to help developers write secure code.
• Source code reviews: I conducted in-depth reviews of source code to identify potential security vulnerabilities and coding errors.

Jan 2008 – Nov 2013 · 5 yrs 10 mos · Barcelona y alrededores, España

• I was responsible for a diverse range of responsibilities, these included:
• Web application security audits and Penetration Testing: I conducted comprehensive security audits of web applications and performed penetration testing (external and internal) to identify potential vulnerabilities and remediation strategies.
• PCI DSS: I ensured that all relevant systems and applications were compliant with the Payment Card Industry Data Security Standard (PCI DSS).
• WIFI network audits: I conducted security audits of WIFI networks to identify vulnerabilities and recommend security improvements.
• Instructor in Security Courses: I taught security courses, including Secure Programming in Web environments and Web Security, to help train and develop the next generation of security professionals.
• Writing secure programming guides: I wrote comprehensive guides on secure programming practices to help developers write secure code.
• Source code reviews: I conducted in-depth reviews of source code to identify potential security vulnerabilities and coding errors.

Nov 2013 – Dec 2014 · 1 yr 1 mo · Bilbao y alrededores, España

• As an Anti-Malware Researcher, I was responsible for conducting reverse engineering of malware and analyzing it to identify its behavior and potential impact. I also worked on developing exploits to take advantage of vulnerabilities in the malware and understand how it can be used by malicious actors.
• Through this experience, I developed strong technical skills in malware analysis and reverse engineering, as well as the ability to identify potential threats and take proactive measures to mitigate them.

Jul 2007 – Jan 2008 · 6 mos · Valencia, España

• As a Junior IT Security Analyst, I gained experience in various aspects of IT security, including reviewing defense systems and performing penetration testing and web application security audits.
• I also developed my programming skills by writing scripts to assist in system attacks and worked on computer management tasks.
• Overall, my experience in this role helped me to develop a strong foundation in IT security and prepared me for more senior positions in the field.