Security Engineer | Systems Programming | Applied Cryptography
$ whoamiI build security-focused software to understand how it can be broken, and break systems to understand how they can be defended. Computer Engineering student @ University of Seville, focused on endpoint telemetry, malware analysis, and offensive security tooling architectures.
Languages: [Go, Python, Bash, TypeScript, C]
Defensive: [EDR Architecture, Zero-Trust Models, YARA, Forensic Telemetry]
Offensive: [Recon Tooling, Exploit Dev, AV/EDR Evasion, Networking I/O]
Crypto: [AES-256-GCM, Argon2id, HMAC, HKDF, E2EE]
Environment: [Linux, Docker, GitHub Actions, Z3 Theorem Prover]| Project | Category | Description |
|---|---|---|
| Aegis Sentinel | Defensive | Next-gen Endpoint Detection & Response (EDR) system. Architecture focuses on host telemetry collection, YARA-based scanning engine, and automated incident response pipelines via REST API. |
| Ares | Offensive | High-performance, highly concurrent network reconnaissance toolkit written in Go. Implements worker pool patterns and context cancellation for rapid vulnerability discovery. |
| Harpocrates | Crypto | CLI/GUI local Zero-Trust password vault. Built to explore applied cryptography: AES-256-GCM encryption, Argon2id key derivation, and tamper-evident audit logs via HMAC. |
| SecureChain TFG | SCA / R&D | Supply Chain security tool extending the SecureChain platform to Go ecosystems. Formal verification of dependency trees via Z3 Theorem Prover and CycloneDX SBOM generation. |
| Basilisk | Defensive | Prototype EDR system for process, network, and registry monitoring. Serves as the foundational blueprint for Aegis Sentinel. |
| Cript | Crypto | Didactic cryptography framework simulating secure End-to-End Encrypted (E2EE) channels utilizing Double Ratchet and HKDF derivations. |
I treat every project as an experiment to go deeper into systems engineering. Currently actively researching:
- Advanced Go Networking: Custom TCP/UDP stack implementations and high-throughput concurrent scanners.
- Linux Internals: Syscall hooking, eBPF capabilities, and memory forensics for EDR telemetry.
- Malware Dev/Evasion: Bypassing static/dynamic analysis via obfuscation, API hashing, and direct syscalls.
"Each line of code written to learn more than what it teaches."