Cybersecurity Engineer · Spain · EU citizen
Designing secure systems.
Understanding software from the inside out.
01 — About
My path into cybersecurity began during my computer engineering degree at Universitat Jaume I with a simple frustration: I could build systems that worked, but I couldn't fully explain what was happening underneath them. Networks, operating systems, memory — every layer I was told to treat as a black box felt like an unread chapter. So I started opening those boxes, and I never really stopped.
That curiosity became a discipline during my master's in Cybersecurity and Privacy at UOC: for my thesis I built a bare-metal Zero Trust laboratory and then attacked it myself, simulating destructive ransomware against the very backup infrastructure designed to survive it. Today I work across both sides of the field — auditing systems, automating analysis, training offensive skills through CTFs — while going steadily deeper into reverse engineering and malware analysis, because the lowest layers are where security is truly decided.
Infrastructure Security & Zero Trust
Malware & Ransomware Analysis
Security Automation
Spanish — Native
Arabic — Native
French — Native
English — Professional
Valencian — Fluent
German — Basic
02 — Experience
2025 — 2026
Master's Thesis — UOC
Architected and deployed a bare-metal Zero Trust laboratory on Proxmox VE and Proxmox Backup Server, then simulated destructive ransomware attacks (MITRE ATT&CK T1490, wiper mode) against it. Implemented data immutability, micro-segmentation and strict RBAC, authored an open-source hardening guide, and achieved an optimal recovery time objective.
2025 — 2026
Technical assessments
Performed technical audits on computer systems and local networks: identifying insecure configurations, evaluating access policies and detecting vulnerabilities. Delivered detailed technical reports with prioritised corrective measures.
2025
Security automation
Developed an automated tool for discovering active hosts and open ports in local networks, with service and version analysis, vulnerability identification and password strength evaluation. Generated preventive reports with prioritised recommendations.
2024
Hack The Box · TryHackMe
Completed numerous Capture The Flag challenges and penetration testing labs, applying command injection and other offensive techniques with Nmap, Burp Suite and Gobuster, and conducting vulnerability assessments end to end.
03 — Selected Work
Proxmox VE · Proxmox Backup Server · pfSense · Zero Trust · RBAC · MITRE ATT&CK
Modern ransomware doesn't just encrypt production systems — it hunts down the backups first (MITRE ATT&CK T1490). If the recovery infrastructure itself can be reached and destroyed, every other defence is theatre.
A bare-metal Zero Trust laboratory built on Proxmox VE and Proxmox Backup Server behind pfSense: micro-segmented networks, strict RBAC with scoped API tokens, and immutable backup storage. I then played the attacker — scripting destructive, wiper-mode ransomware simulations against the lab to prove the design held under a real T1490 scenario.
04 — Capabilities
05 — Education & Certifications
2025 — 2026
Universitat Oberta de Catalunya (UOC). Thesis: backup server hardening and ransomware analysis in a bare-metal Zero Trust laboratory.
2021 — 2025
Universitat Jaume I (UJI). Specialisation in Information Technology: networks, operating systems, security and software engineering.
Ethical Hacking
Cisco Networking Academy
2025 · Completed
06 — Contact
I'm open to security engineering roles, infrastructure hardening work and research collaborations across Europe. If you'd like to talk, write to me — I read everything.
[email protected]