You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Marc HernandezMH

Marc Hernandez

Senior Information Security Engineer

€350/day
Barcelona, ES
8-15 years

Average response time: 1 hour

About Marc

Cybersecurity consultant and university lecturer with a strong technical background and over 6 years of experience in the field. I currently work as a Senior Information Security Engineer at Eurofins, acting as a security consultant across multiple domains, with a focus on risk management, vulnerability assessment, and network security. I report directly to the Group CISO and support security operations across hundreds of laboratories in Europe. My responsibilities include technical audits, firewall and WAF review, incident response, security governance, and compliance with ISO 27001, GDPR, NIST, and ENS frameworks.

My areas of expertise span threat modeling, third-party risk management, endpoint and cloud security, implementation of Zero Trust strategies, and support in regulatory audits. I also contribute to the development and monitoring of operational security KPIs, and I provide guidance for continuous improvement in security posture across critical infrastructures.

In parallel, I teach at Universitat Oberta de Catalunya (UOC), contributing to the Bachelor's Degree in Computer Engineering and the Master’s in Cybersecurity and Privacy. I offer freelance consulting services for SMEs, startups, and institutions looking to strengthen their cybersecurity maturity, with tailored support in audits, compliance, policy development, security awareness training, and hands-on technical implementation.

  • English

    Native or bilingual

  • Catalan

    Native or bilingual

  • Spanish

    Native or bilingual

Can work on-site
Barcelona (up to 50km)

Experience

  • Eurofins
    Senior Information Security Engineer
    September 2024 - Today (1 year and 9 months)
    Barcelona, Spain
    • Supporting analysis and audit for Firewalls. Approving firewall rules.
    • Ensuring network-level security, approving configurations, WAF exceptions, etc.
    • Assessing vulnerabilities in the regional and local infrastructures; performing vulnerability scans and self-risk assesments.
    • Implementing remediations following Group's pentests, perimeter scans, vulnerability scans, etc.
    • Assisting in security breach investigations: investigating reports, incidents, vulnerability intelligence sent by the SOC.
    • Becoming the technical point of contact of the Group Risk team during laboratory audits.
    • Supporting the build-up of operational Security KPIs and recommending improvements.
  • RISO Team
    IT Security Engineer
    May 2022 - Today (4 years and 1 month)
    Barcelona, Spain
    Ensuring network-level security, approving configurations, WAF exceptions, etc.
    • Assessing vulnerabilities in the regional and local infrastructures; performing vulnerability scans.
    • Testing laboratories for compliance with security policies and procedures, performing regular reviews (access rights, admin access,configuration, firewall rules, cloud exposure, cloud compliance, etc.)
    • Implementing remediations following Group's pentests, perimeter scans, vulnerability scans, etc.
    • Assisting in security breach investigations: investigating reports, incidents, vulnerability intelligence sent by the SOC.
    • Becoming the technical point of contact of the Group Risk team during laboratory audits.
    • Supporting the build-up of operational Security KPIs and recommending improvements.
  • Universitat Oberta de Catalunya
    Profesorado Docente Colaborador (PDC)
    September 2024 - Today (1 year and 9 months)
    Barcelona, Spain
    Adjunct Teaching Staff (PDC) in:

    Bachelor's Degree in Computer Engineering – E-commerce

    Master's Degree in Cybersecurity and Privacy – Data Privacy and Security

Recommendations

Be the first to recommend Marc

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • CERTIFICADO PROFESIONAL DE ANÁLISIS INFORMÁTICO FORENSE 2 Introduction to Cybersecurity Tools & Cyber Attacks Politics and Economics of International Energy
    CERTIFICADO PROFESIONAL DE ANÁLISIS INFORMÁTICO FORENSE 2 Introduction to Cybersecurity Tools & Cyber Attacks Politics and Economics of International Energy
  • Bachillerato (Científico - Tecnológico), Bachillerato Científico - Tecnológico
    Sagrat Cor Diputació
    2012
    Bachillerato (Científico - Tecnológico), Bachillerato Científico - Tecnológico

Certifications

  • CISSP – Certified Information Systems Security Professional
    (ISC)²
    2025
    Incident Response Security Architecture and Engineering Network Security Software Development Security Compliance (ISO 27001, GDPR, NIST) Risk Management Security Operations Security Assessment and Testing Identity and Access Management (IAM)
  • The Security Sentinel
    Udemy
    2024
    Information Security Basics Malware and Phishing Awareness Password and Identity Protection Threat Awareness Incident Reporting Security Policy Compliance Social Engineering Defense Secure Workplace Practices Data Protection Principles Safe Use of Internet and Email

Skill set

Categories