Cybersecurity engineer, security researcher, and senior DevOps/cloud infrastructure engineer with 15+ years of experience across penetration testing, vulnerability research, intrusion detection, applied AI for security monitoring, and large-scale cloud & HPC infrastructure. PhD in Cybersecurity from Goethe University Frankfurt, in collaboration with CERN. Published researcher with 200+ peer-reviewed papers and 6 assigned CVEs, including a Microsoft-acknowledged memory-corruption vulnerability (MS13-056).

Experienced across the full security and infrastructure lifecycle: ethical hacking and source code audits for banks and ISPs, five years building AWS/Kubernetes/Terraform infrastructure for blockchain products at Edenia, seven years embedded in the ALICE experiment at CERN managing critical cluster infrastructure, and founding a security startup. Comfortable working close to the metal (exploit development, fuzzing) and at the systems level (cloud infrastructure, observability, DevSecOps).

Currently Co-Founder & CEO of Sakundi, a security, privacy, and digital identity startup, and a part-time professor teaching blockchain security and infrastructure/DevOps practices in the Cybersecurity Master’s program at the Costa Rica Institute of Technology (TEC).

Core skills

• Offensive Security — Penetration testing, source code auditing, fuzzing, vulnerability research & exploit development, ethical hacking, CVE research
• Defensive Security — Intrusion detection & prevention, security monitoring for distributed/grid systems, distributed digital identity, CIS hardening, IAM least privilege, SSH key management, MFA, vulnerability scanning
• Cloud & Infrastructure — OpenStack, AWS (EC2, EKS, S3, CloudWatch, IAM, VPC), multi-account environments, Linux (Debian, Ubuntu, CentOS, Tails)
• Containers & Orchestration — Docker, Kubernetes (EKS), Helm, containerized microservices deployment
• CI/CD — GitLab CI (pipelines, downstream, multi-project), GitHub Actions, Jenkins
• IaC & Configuration Management — Terraform, Puppet, Ansible, Foreman, Vagrant — reproducible, version-controlled infrastructure
• Monitoring & Observability — Grafana, Prometheus, Zabbix, AWS CloudWatch, ELK Stack — dashboards, alerting, anomaly detection
• AI / ML for Security — Deep learning, machine learning, NLP — TensorFlow, Keras, scikit-learn, pandas, NumPy, SciPy, Gensim
• Programming & Scripting — Python, Bash/Shell, JavaScript/Node.js, Perl, C/C++, Java, Solidity
• Blockchain — Ethereum, Bitcoin, Polygon, Antelope (EOSIO), Dash, Nym — validator/node infrastructure, zero-knowledge proofs

Selected projects

• Tikuna — AI-based security monitoring system for the Ethereum P2P network (nodes & validators), funded by an Ethereum Foundation Academic Research grant.
• Arhuaco — PhD thesis project at CERN: deep learning and isolation-based intrusion detection for distributed high-throughput computing.
• Zikuani — Privacy-preserving identity verification system using zero-knowledge proofs. Backed by ZK Bankai and Polygon; DIF 2025 hackathon winner.
• ZK Voto Digital — Secure voting system using Zikuani to verify voter eligibility (humanity, citizenship, age) without exposing personal identity.

See the CV for full professional experience, education, and publications, and Publications and Portfolio for more detail.