Valencia, Spain

Cibersecurity Engineer

I sit between software engineering and security operations — building systems, then hardening them.

Get in touch GitHub LinkedIn

About

I hold a degree in Software Engineering and I am currently studying a Master's in Cybersecurity and Cyberintelligence. My day-to-day work has been SIEM monitoring, zero-trust identity in Active Directory and network segmentation — the practical side of keeping an infrastructure trustworthy.

Outside of work I run my own hardened lab: self-hosted services, a full SIEM stack and automated deployment, because I would rather learn a system by breaking and rebuilding it.

Experience

Junior ICT Network Security Engineer

SSH Team

2024 — 2025 Logroño
  • Detected anomalies through SIEM telemetry to pre-empt breaches.
  • Enforced zero-trust IAM in Active Directory: MFA, least privilege, orphaned account removal.
  • Segmented traffic with VLANs, port security and strict ACL enforcement.
  • Documented vulnerabilities and asset lifecycles to speed up incident response.

ICT Network Technician (Internship)

Dialnet

2023 Logroño
  • Monitored dashboards to detect and resolve network outages before users reported them.
  • Verified, labelled and terminated copper and fibre cabling in server racks.
  • Configured VLANs, switch ports and IP assignments on routers and switches.
  • Maintained equipment inventories and documented recurring failures.

Education

MSc Cybersecurity and Cyberintelligence

Universitat Politècnica de València

2025 — present

Threat hunting, incident response, digital forensics, pentesting and OSINT; cryptography, malware analysis; SIEM, SOAR, EDR, IDS/IPS; GDPR, ISO/IEC 27001, NIS2 and ENS.

BSc Software Engineering

Universidad de La Rioja

2021 — 2025

Software and applications development and analysis.

Self-hosted lab

A personal infrastructure I built and hardened end to end — the project I use to test everything I learn.

  • OpenVPN and Pi-hole for secure remote access and internal service discovery.
  • Docker containers on Debian hosting GitLab with CI/CD and a private container registry.
  • Elastic SIEM stack for real-time log aggregation and file integrity monitoring.
  • UFW firewalls, Let's Encrypt TLS and VLAN segmentation.
  • Bash automation for reproducible deployment and fast disaster recovery.

Toolkit

Security

  • SIEM
  • Zero-trust IAM
  • Active Directory
  • VLAN / ACL
  • Elastic
  • ISO/IEC 27001

Infrastructure

  • Docker
  • Debian
  • GitLab CI/CD
  • OpenVPN
  • Pi-hole
  • UFW
  • Bash

Development

  • Software Engineering
  • Git
  • Automation
  • Python
  • Java
  • C/C++