Nov 2022 – Present · 3 yrs 6 mos · San Francisco y alrededores

• I provide technical security architecture and risk guidance for Google's global-scale infrastructure, driving the transition toward AI-integrated defense and autonomous security tooling. I architect and implement solutions for risk assessments and threat modeling at massive scale, replacing manual security lifecycles with advanced automation. My core focus lies at the intersection of Critical AI Infrastructure and Assurance Engineering, where I harden Google’s systems against emerging adversarial machine learning threats.
• Key Contributions & Technical Ownership:
• AI Security & ML Red Teaming: Execute ML Red Teaming exercises and simulate advanced attacks to identify and mitigate vulnerabilities in critical AI infrastructure.
• Autonomous Defense & Offensive Tooling: Architected and built automated security systems using Agentic Frameworks (LLM-based agents) to autonomously identify and remediate security flaws.
• Vulnerability Management at Scale: Designed and deployed vulnerability management protocols for distributed systems at Google-scale, significantly reducing manual toil through AI-driven automation.
• Assurance Engineering: Own the security and defense strategies for critical AI production environments, ensuring high-assurance deployments through rigorous technical standards.
• Infrastructure Protection: Develop robust security standards for Google’s networks, utilizing Go and Python to build custom, scalable tooling for real-time monitoring and remediation.

Nov 2019 – Present · 6 yrs 6 mos · Mountain View, California, United States

• Established a Call for Papers (CFP) review process to facilitate the selection of diverse and high-quality content.
• Served as a mentor to offer professional development opportunities for aspiring cybersecurity practitioners.
• Coordinated speaker sessions and workshops for the conference program.

Oct 2019 – Nov 2022 · 3 yrs 1 mo · San Francisco Bay Area

• Security Software Engineer specialized in Application and Cloud Security. Currently working with the team responsible for building and maintaining the MinIO Kubernetes Operator, one of the core products to automate the deployment and configuration of MinIO on cloud environments (Public/Private/Hybrid/etc)
• core responsibilities:
• System and network security, authentication and security protocols, cryptography and application security
• System design and development with Go, NodeJS and React
• Present detailed, written technical information for internal and external audiences
• Customer support: subject matters expert in the information security area
• Product security assessments
• Follow up of the threat landscape for popular software & services integrated with MinIO
• Security architecture

Jan 2019 – Oct 2019 · 9 mos · Guadalajara Area, Mexico

• Distributed systems Engineer specialized in application security. Part of the provisioning team and responsible for various aspects with the security of the service such as mitigation of vulnerabilities reported through the company bug bounty program.
• Microservices design and development.
• Integration and authentication with third party providers.
• Backend development.
• Security code reviews.

Nov 2016 – Dec 2018 · 2 yrs 1 mo · Guadalajara y alrededores, México

• Founding member of the engineering team, primarily working in design and development of platform core features. As a software engineer with experience in the information security industry I enforce secure coding best practices across all the members of the team through code reviews and security awareness.
• Implementation and configuration of security and monitoring infrastructure with open source tools.
• Design and development of product anti-abuse features.
• Backend development.
• Frontend development.
• Mobile development.
• Software testing.

Mar 2016 – Oct 2016 · 7 mos · Guadalajara y alrededores, México

• As a member of the software engineering division I applied my knowledge of software architecture and information security to perform software development tasks associated with debugging, QA testing, automation and security testing.
• Shell scripting and automation.
• Backend development.
• Quality assurance.
• Managing Infrastructure.

May 2012 – Mar 2016 · 3 yrs 10 mos · Mexico

• Security Tools Development.
• Security Risk Assessments.
• Linux and Windows Server hardening.
• Web penetration testing.
• Mobile penetration testing
• Social Engineering Penetration Testing
• Basic binary analysis and reverse engineering.
• Security code reviews, static and dynamic code analysis.

Sep 2011 – Dec 2013 · 2 yrs 3 mos

• Member of Microsoft Student Partner program from 2011 to 2013; I was responsible of giving talks and workshop about Windows Phone and other Microsoft technologies at my community.

Feb 2010 – Feb 2011 · 1 yr

• Develop creative and efficient solutions for any problem related to a web application, like plugins, modules and components mainly for the cms Joomla and Wordpress. Implementing and customizing E-commerce sites using PrestaShop as well as find bugs and patch them (web application and server level).
• Site: http://iq-zone.com/