Cybersecurity Engineer · Spain · EU citizen
Designing secure systems.
Understanding software from the inside out.
01 — About
My path into cybersecurity began during my computer engineering degree at Universitat Jaume I with a simple frustration: I could build systems that worked, but I couldn't fully explain what was happening underneath them. Networks, operating systems, memory — every layer I was told to treat as a black box felt like an unread chapter. So I started opening those boxes, and I never really stopped.
That curiosity became a discipline during my master's in Cybersecurity and Privacy at UOC. For my thesis I built a bare-metal Zero Trust laboratory and then attacked it myself — simulating destructive ransomware against the very backup infrastructure designed to survive it. Defence only convinces me when it has been tested against a real, well-understood attack; that principle runs through everything I do.
Today I work across both sides of the field: auditing systems and networks, building automation that turns hours of manual analysis into minutes, and training offensive skills through pentesting labs and CTF challenges. I'm steadily going deeper into reverse engineering and malware analysis — Ghidra, assembly, the internals most people avoid — because the lowest layers are where security is truly decided.
Infrastructure Security & Zero Trust
Malware & Ransomware Analysis
Security Automation
Spanish — Native
Arabic — Native
French — Native
English — Professional
Valencian — Fluent
German — Basic
02 — Experience
2025 — 2026
Master's Thesis — UOC
Architected and deployed a bare-metal Zero Trust laboratory on Proxmox VE and Proxmox Backup Server, then simulated destructive ransomware attacks (MITRE ATT&CK T1490, wiper mode) against it. Implemented data immutability, micro-segmentation and strict RBAC, authored an open-source hardening guide, and achieved an optimal recovery time objective.
2025 — 2026
Technical assessments
Performed technical audits on computer systems and local networks: identifying insecure configurations, evaluating access policies and detecting vulnerabilities. Delivered detailed technical reports with prioritised corrective measures.
2025
Security automation
Developed an automated tool for discovering active hosts and open ports in local networks, with service and version analysis, vulnerability identification and password strength evaluation. Generated preventive reports with prioritised recommendations.
2024
Hack The Box · TryHackMe
Completed numerous Capture The Flag challenges and penetration testing labs, applying command injection and other offensive techniques with Nmap, Burp Suite and Gobuster, and conducting vulnerability assessments end to end.
03 — Selected Work
01 · Zero Trust · Master's Thesis
Modern ransomware doesn't just encrypt production systems — it hunts down the backups first (MITRE ATT&CK T1490). If the recovery infrastructure itself can be reached and destroyed, every other defence is theatre.
A bare-metal Zero Trust laboratory built on Proxmox VE and Proxmox Backup Server behind pfSense: micro-segmented networks, strict RBAC with scoped API tokens, and immutable backup storage. I then played the attacker — scripting destructive, wiper-mode ransomware simulations against the lab to prove the design held under a real T1490 scenario.
Proxmox VE · Proxmox Backup Server · pfSense · Zero Trust · RBAC · MITRE ATT&CK
02 · Security Automation
Assessing a local network by hand — enumerating hosts, ports, services and weak credentials — takes hours of repetitive work and produces inconsistent notes rather than evidence a team can act on.
An automated pipeline that discovers active hosts and open ports, fingerprints services and versions, identifies known vulnerabilities and evaluates password strength through controlled brute-force techniques. Every run ends in a preventive report with recommendations ranked by priority.
Python · Bash · Nmap · Hydra · Rclone
03 · Vulnerability Assessment
Most systems don't fall to exotic exploits — they fall to insecure configurations, over-permissive access policies and unpatched services that nobody had examined systematically.
Technical audits of computer systems and local networks: reviewing configurations against hardening baselines, evaluating access policies, and detecting vulnerabilities across the attack surface. Each audit closes with a detailed technical report of prioritised corrective measures the owner can execute immediately.
Linux · Network Security · Vulnerability Analysis · Technical Reporting
04 · Pentesting · CTF
You cannot design credible defences against techniques you have never executed. Offensive skills decay unless they are practised against realistic, hostile targets.
Sustained, hands-on training across Hack The Box and TryHackMe: penetration testing labs and CTF challenges covering enumeration, web exploitation, command injection and privilege escalation — with Nmap, Burp Suite, Gobuster and ffuf as working instruments rather than checklist items.
Nmap · Burp Suite · Gobuster · ffuf · Linux · Command Injection
04 — Capabilities
05 — Education
2025 — 2026
Universitat Oberta de Catalunya (UOC). Thesis: backup server hardening and ransomware analysis in a bare-metal Zero Trust laboratory.
2021 — 2025
Universitat Jaume I (UJI). Specialisation in Information Technology: networks, operating systems, security and software engineering.
06 — Certifications
Cisco Networking Academy
2025 · Completed
07 — Contact
I'm open to security engineering roles, infrastructure hardening work and research collaborations across Europe. If you'd like to talk, write to me — I read everything.
[email protected]