Description

Cybersecurity Consultant and Cybersecurity Engineer with hands-on experience in cyber security service delivery, security operations, and audit-ready documentation. Experienced in vulnerability management, SIEM-based monitoring, and incident response, with a strong foundation in security governance, risk management, and compliance (ISO 27001, NIST, GDPR). Proven ability to translate technical findings into clear, actionable insights for stakeholders and support continuous service and process improvement.

Languages

English
Native or bilingual
Spanish
Basic

Workplace preferences

Can work on-site

Barcelona (up to 50km)

University of Seville
RESEARCHER
May 2026 - Today (1 month)
Seville, Spain
• • Contributing to a funded research project under the Google–University of Seville AI Chair focused on secure intelligent infrastructures, distributed systems, and AI-driven digital environments.
• • Working on governance-aware architectures, AI-assisted security analysis, trust modelling, and resilient distributed infrastructures for secure digital environments.
• • Participating in interdisciplinary research activities related to cybersecurity, resilient AI-enabled systems, digital infrastructures, and distributed trust frameworks.
Self-employed
INDEPENDENT CYBERSECURITY CONSULTANT
October 2024 - May 2026 (1 year and 7 months)
Donostia-San Sebastian, Gipuzkoa, Spain
• • Conducted vulnerability assessment and remediation activities using Nessus and OpenVAS across on-premises and cloud-based environments.
• • Performed security monitoring, incident investigation, and threat analysis using SIEM-related workflows, log analysis, and alert triage.
• • Applied IAM and PKI concepts to strengthen authentication mechanisms, access controls, and security baseline practices.
Ceit - Technology Center
SCIENTIFIC RESEARCHER
September 2023 - September 2024 (1 year)
Donostia-San Sebastian, Gipuzkoa, Spain
• • Contributed to cybersecurity-focused research by assessing security, access control, and trust mechanisms in decentralized and distributed systems for enterprise and critical-infrastructure contexts.
• • Supported the FA5-TRANS4M-R project by aligning technical controls with GDPR requirements, improving access control practices, and contributing to threat detection in regulated environments.
• • Developed security assessment methodologies to evaluate trust models and potential vulnerabilities, producing technical documentation aligned with industry and compliance standards.