Finding the cracks before
someone else does.

Pentester focused on internal infrastructure and Active Directory, with a background in vulnerability management

What I do

From finding exposure to proving impact and getting it fixed.

Penetration testing

Internal and web assessments, from recon to post-exploitation, with clear and actionable reporting.

Vulnerability management

Identification, prioritization and remediation tracking across enterprise environments.

NessusOpenVAS

Timeline

Here is a little bit of my background, my education the places i worked and the certifications i own.

2020 – 2021

SOC analyst (L1)

Operating and managing multiple SIEM platforms to monitor security events, analyze alerts, and escalate incidents in accordance with established procedures. Actively involved in incident investigation and documentation, producing clear and structured reports to support incident response, threat analysis, and continuous improvement of security operations.

Job
2021 – 2024

Bachelor's degree in Computer Science

Education
2024 – 2025

Master's in Cybersecurity

Master’s program combining offensive and defensive security. Coursework covered cyber intelligence and threat analysis, reverse engineering of software and malware, ethical hacking and penetration testing, SOC operations, and incident response. This blend of attacker and defender perspectives gives me a solid understanding of how threats are built, detected and contained.

Education
2026

CPTS (Certified Penetration Testing Specialist)

Hack The Box’s Certified Penetration Testing Specialist. A multi-day, fully practical exam in a realistic enterprise network, ending with a professional-grade pentest report. No multiple choice, no shortcuts.

Certification
2024 – Current

Vulnerability assessor

Responsible for vulnerability management and security operations across critical systems at a major international airport. Duties include monitoring and configuring security tools (AV, EDR, SIEM, DLP), coordinating security audits (Nessus, ISO 27001, ethical hacking), and analyzing and responding to suspicious security events. Also oversee change management, patching cycles via SCCM, backup compliance, and disaster recovery testing and planning, while supporting the day-to-day maintenance of data center infrastructure and the rollout of new projects and services.

Job

Projects

Proof of work, not just certificates.

Knowledge base · Open source

H4ckV4ult

My open knowledge base of hacking notes: practical guides on ethical hacking, pentesting techniques and defensive security, written from what I learn in labs and certifications. Free to read, built to be useful.

OWASP TOP 10Active DirectoryPrivilege Escalation
Preview
Research · Critical infrastructure

Protecting SCADA systems against cyber threats

Project screenshot

SCADA systems run power grids and water treatment plants, and attackers know it. A deep dive into how they work, how they evolved and how they get breached, from architecture and protocols to real-world attacks like Stuxnet.

SCADAModbusFactoryIO
View details
Research · Forensics

LOST Project: FORENSIC

Project screenshot

Every cyberattack leaves traces, and someone has to know how to read them. My Final Degree Project adds digital forensics to LOST, the security training platform built by La Salle and ISECOM, covering procedures, tools, legislation and hands-on scenarios.

AutopsyVolatilityDPAPI
View details

Tech Stack

Technologies, tools and frameworks I use across offensive security, vulnerability management, infrastructure and cloud environments.

01

Offensive Security

Burp Suite Caido OWASP Top 10 Nmap Metasploit BloodHound Impacket Certipy NetExec Ligolo-ng Feroxbuster Responder

And so many other tools from the Kali Linux ecosystem.

02

Vulnerability Assessment

Nessus OpenVAS CrowdStrike Falcon Spotlight
03

Infrastructure & Virtualization

Windows Server Linux Active Directory VMware vSphere Docker Kubernetes pfSense
04

Cloud Security

AWS
05

Security Monitoring & Log Analysis

Splunk Kibana
06

Scripting & Automation

Python PowerShell Bash Git

Let’s talk security

Open to pentesting and red team opportunities. Available to relocation