I build security programs from zero.

Most recently Head of Security at Patchstack — the world's top-1 CNA in 2023 and 2025, ahead of GitHub and Kernel.org — where I built the entire internal security function from no prior baseline: policies, IAM, incident response, vendor risk, and full ISO 27001 / SOC 2 readiness across a 30-person fully remote organization.

Before that, eight years at Sucuri / GoDaddy dissecting malware and resolving 4,000–6,000 web security incidents annually. Deep specialization in e-commerce credit card skimmers and CMS compromise forensics. Thinking like an attacker before defending taught me what most security programs miss.

Builder of programs. Operator at incident scale. Strategist at the exec table. Three roles rarely combined — and where I work.

CISSP. Computer Science Engineer (ULPGC) — ORCID 0000-0001-6605-7761. Head of Technology at ISC2 Spain Chapter. 25+ international conference talks on web security, vulnerability intelligence, and security culture — across Europe, Japan, and online.

On AI: I use it daily, grounded in formal academic training (neural networks, genetic algorithms, automata). Not hype, not fear — a working tool with sharp edges.

Based in Valencia, Spain.