About
About this blog
The goal of this blog is to document the projects I'm doing in my free time and the things I learn. I don't intend for it to be an updated blog since I am aware that it takes a long time, but I would like to have it as a place to save the projects and notes on problems or stuff that have taken me time to learn or solve. Although documenting takes time, I think it is also a way to establish knowledge and finish filling in those gaps that exist during learning or the process of doing something.
About the author
I'm a computer engineer specilized in cybersecurity. In recent years my interest has expanded to include mechanical design, electronics, and hardware. I also have experience in programming and configuring inverters for electric motors as I have been building electric motorcycles on my free time.
Resume
Professional experience
2024 - 2025 | System administrator & Security Analyst at Intertech Trading Corp - Miami, USA • Managed and maintained IT infrastructure, including servers, networks, and endpoint devices to ensure system reliability and performance. • Setup of AD Domain Controller and pfSense router/firewall, OpenVPN. • Performed system administration tasks across Windows and Linux environments. • Conducted security analysis and implemented best practices to harden systems and protect against cyber threats. • Monitored system logs and network activity to detect anomalies and enforce access control policies. |
2022 - 2024 | Technical lead at DOTLAKE - Madrid, Spain (Remote) • Led the development of a cyber intelligence platform with a distributed crawling system designed to extract data from forums, closed sources, and darknet sites while bypassing anti-crawling mechanisms. • Designed and maintained scalable backend systems using technologies such as Celery, Python, Redis, Elasticsearch, Flask, LLM models, Docker, docker-compose and more, ensuring high performance and resilience. • Deployed and managed infrastructure on AWS, indexing and processing over 60 million documents in a production environment. • Oversaw system architecture and contributed to key technical decisions, aligning platform growth with business goals. • Coordinated a remote team of developers, promoting efficient collaboration. |
2019 - 2022 | Security auditor at Mollitiam Industries - Madrid, Spain (Remote) • Conducted in-depth security audits for mobile and web applications, identifying vulnerabilities and recommending mitigation strategies. • Performed internal and external penetration testing across corporate networks, including AD, LDAP, Windows, Linux, and AWS cloud infrastructures. • Executed vulnerability assessments using a combination of automated tools and manual techniques to ensure comprehensive coverage. • Audited WiFi networks, hardware devices, and conducted PLC security research to assess OT environments and real-world exploitability. • Carried out AWS, infrastructure, and internal network audits with a focus on risk impact and exploitability. • Developed internal tools and scripts. |
2018 - 2019 | Pentester at Stackoverflow SL - Madrid, Spain (Remote) • Performed penetration testing and ethical hacking engagements across web applications, mobile apps, internal networks, and AWS environments. • Conducted WiFi and hardware audits to identify security weaknesses and evaluate real-world exploitability. • Executed comprehensive vulnerability assessments using both automated tools and manual testing techniques to uncover complex security issues. • Delivered clear, actionable reports including risk assessments and tailored remediation strategies to technical teams. |
Education
2014 - 2019 | Bachelor Degree in Computer Science, University of Burgos - Burgos, Spain Final project: CanBus Reverse Engineering Toolkit Designd and development of custom hardware and software for reverse engineering private canbus protocols in Java + JavaFX. |
2016 - 2017 | Bachelor degree in Computer Science, University of Science and Technology - Wroclaw, Poland Erasmus+ |
Awards
2017 | Winner of ECSC 2017 with the spanish team. - Málaga, Spain Member of the spanish national team, winners of the European Cybersecurity Challenge 2017 organized by ENISA (European Union Agency for Network and Information Security). |
2016 | Winner of ECSC 2016 with the spanish team. - Düsseldorf, Germany Member of the spanish national team, winners of the European Cybersecurity Challenge 2016 organized by ENISA. |
2015 | Member of the spanish team in ECSC 2015. - Lucerne, Switzeland Member of the spanish national team at the European Cybersecurity Challenge 2017. Rookie team of the year. |
Projects
2021 - Present | Team leader at UBURacing Team leader of UBURacing that built an electric motorbikes from scratch and participates in Motostudent International Competition with teams from all countries over the world. Some of the tasks carried out were: • Mechanical design of the prototype (Fusion360 and Solidworks). • Datalogger and dashboard programming. (In C). • Inverter programming (Sevcon Gen4 and DANA TM4). • Battery testing. • Battery package design and manufacturing. • BMS programming. • Electrical system design. |
2019 - 2021 | Head of electronics at UBURacing Responsible for telemetry and powertrain controller programming of an electric motorcycle for race in the International Motostudent Competition. Some of the tasks I was involved in were: • Design of datalogging hardware. • Programming of datalogging in C. • Design and programming of the dashboard. • Electrical system wiring (HV and LV). • Design and assembly of the battery charging system. • Inverter programming (for motor control and performance). |
Experience / Skills
- Software development
- Computer security
- Web security: OWASP, DAST, SAST.
- Reverse engineering: Basic knowledge
- Network security
- Penetration testing: Internal/external network assessments, mobile, AWS Cloud environments.
- Hardware and PCB design
- Microcontroller programming (Canbus, SPI, i2c, UART, OneWire, PWM, signal filtering, ADC)
- Mechanical design
- Certifications: AWS Cloud Practitioner, CompTIA Security+
Some technologies I touched
- System administration: Linux, VMWare, Windows Server (Active Directory), Nginx, Apache2, OpenVPN, pfSense, Docker, docker-compose, iptables,
- Cybersecurity: Burp Suite, Wireshark, Nmap, IDA Pro, x86dbg, ettercap, Kali suite.
- AWS: Secrity groups, VPCs, EC2, ECS, Opensearch, Elasticache, S3, and more.
- Software development: Python, C, Java, JavaFX, Flask, LaTeX, SQL (MySQL, SQLServer, SQLite), Git, Redis, ELK Stack, MongoDB, RabbitMQ, Grafana, API Rest.
- Mechanical design: Fusion360, Solidworks.
- PowerBi: Get data from SAP table structure (SQL) and generating live reports.
- Electronics: KiCAD, PSIM.
- 3D Printing: FDM and SLA. Marlin firmware (I built my own 3D printer), Cura, Simplify3D, Bambulab Studio, Chitubox, 3D Scanners, mesh repair.
- Adobe Suite: Photoshop, Premiere, After effects.