CV
Andrés Gómez Ramírez
Summary
Cybersecurity engineer, security researcher, and senior DevOps/cloud infrastructure engineer with 15+ years of experience across penetration testing, vulnerability research, intrusion detection, applied AI for security monitoring, and large-scale cloud & HPC infrastructure. PhD in Cybersecurity (Goethe University Frankfurt, in collaboration with CERN). Co-Founder & CEO of Sakundi.
Education
- Computer Science (Cybersecurity)2019Goethe University, Frankfurt am Main, Germany
- Blockchain Security2021Blockchain Training Alliance
- Computer Science2011Universidad de Antioquia, Medellín, Colombia
Work Experience
- Part-Time Professor, Security/Blockchain2026 - PresentCosta Rica Institute of Technology (TEC)Teach within the Cybersecurity Master's program, covering blockchain security fundamentals.
- Security & DevOps Developer2025 - 2026Modulo LabsAnalyzed and developed cryptographic code and smart contracts for Panther, a privacy-enhancing protocol, with a focus on security review. Managed deployment pipelines and infrastructure for the protocol on the Polygon ecosystem.
- Co-Founder & CEO2020 - 2025Sakundi ÖUFounded and lead a security, privacy, and digital identity startup, setting technical direction and client strategy. Deliver security audits, monitoring solutions, and identity infrastructure to enterprise and protocol clients. Designed and maintained reproducible, auditable deployment pipelines and infrastructure-as-code for client environments.
- Blockchain DevOps Engineer2020 - 2025EdeniaDesigned, deployed, and maintained Linux-based on-premise and cloud infrastructure on AWS (EC2, EKS, S3, IAM, VPC) for blockchain-focused products. Provisioned and managed Kubernetes clusters and containerized microservices. Authored Terraform modules for infrastructure-as-code. Built CI/CD pipelines with GitHub Actions. Implemented observability with Grafana and Prometheus. Delivered infrastructure for blockchain ecosystems including EOSIO/Antelope, Ethereum, and Bitcoin networks.
- DevOps Engineer2013 - 2020Goethe University Frankfurt / CERN (ALICE Experiment)Built and maintained the security monitoring and infrastructure management system for the ALICE High-Level Trigger (HLT) computing cluster using Zabbix. Managed infrastructure-as-code and configuration management using Puppet and Ansible, enforcing hardened baselines across hundreds of compute nodes. Worked with Vagrant and OpenStack for virtual environment provisioning; contributed to the HLT read-out upgrade for LHC Run 2 (published in JINST).
- PhD Researcher, Computer Science (Cybersecurity)2013 - 2019Goethe University Frankfurt / CERNResearched deep learning (generative models) and isolation-based methods for intrusion detection and prevention on the Worldwide LHC Computing Grid (WLCG). Built a Python/Perl framework implementing the research; co-authored 3 peer-reviewed papers from this work.
- Security Researcher2011 - 2013Fluid AttacksPerformed infrastructure assessments, penetration tests, source code audits, and vulnerability assessments for banks, software development companies, and ISPs. Identified and reported multiple CVEs, including a Microsoft DirectShow memory-overwrite vulnerability (MS13-056).
Skills
Offensive Security
- Penetration testing
- Source code auditing
- Fuzzing
- Vulnerability research
- Exploit development
- Ethical hacking
- CVE research
Defensive Security
- Intrusion detection & prevention
- Security monitoring for distributed/grid systems
- Distributed digital identity
- CIS hardening
- IAM least privilege
- SSH key management
- MFA
- Vulnerability scanning
Cloud & Infrastructure
- OpenStack
- AWS (EC2, EKS, S3, CloudWatch, IAM, VPC)
- Multi-account environments
- Linux (Debian, Ubuntu, CentOS, Tails)
Containers & Orchestration
- Docker
- Kubernetes (EKS)
- Helm
- Containerized microservices deployment
CI/CD
- GitLab CI (pipelines, downstream, multi-project)
- GitHub Actions
- Jenkins
IaC & Configuration Management
- Terraform
- Puppet
- Ansible
- Foreman
- Vagrant
Monitoring & Observability
- Grafana
- Prometheus
- Zabbix
- AWS CloudWatch
- ELK Stack
AI / ML for Security
- Deep learning
- Machine learning
- NLP
- TensorFlow
- Keras
- scikit-learn
- pandas
- NumPy
- SciPy
- Gensim
Programming & Scripting
- Python
- Bash/Shell
- JavaScript/Node.js
- Perl
- C/C++
- Java
- Solidity
Blockchain
- Ethereum
- Bitcoin
- Polygon
- Antelope (EOSIO)
- Dash
- Nym
- Validator/node infrastructure
- Zero-knowledge proofs
Publications
- Tikuna: An Ethereum Blockchain Network Security Monitoring System2023ISPEC 2023, Springer LNCS vol. 14341AI-based security monitoring system for the Ethereum P2P network (nodes & validators).
- Arhuaco: Deep Learning and Isolation Based Security for Distributed High-Throughput Computing
- A Security Monitoring Framework for Virtualization Based HEP Infrastructures2017
- The ALICE High-Level Trigger Read-Out Upgrade for LHC Run 22015
- Intrusion Prevention and Detection in Grid Computing — The ALICE Case2015
- O2: A Novel Combined Online and Offline Computing System for the ALICE Experiment2014
Teaching
- Blockchain Security Fundamentals2026Costa Rica Institute of Technology (TEC)Role: Part-Time Professor, Cybersecurity Master's program
Portfolio
- TikunaPortfolioAI-based security monitoring system for the Ethereum P2P network (nodes & validators), funded by an Ethereum Foundation Academic Research grant.
- ArhuacoPortfolioPhD thesis project at CERN: deep learning and isolation-based intrusion detection for distributed high-throughput computing.
- ZikuaniPortfolioPrivacy-preserving identity verification system using zero-knowledge proofs. Backed by ZK Bankai and Polygon; DIF 2025 hackathon winner. Includes its own cloud deployment infrastructure and CI/CD pipeline.
- ZK Voto DigitalPortfolioSecure voting system using Zikuani to verify voter eligibility (humanity, citizenship, age) without exposing personal identity.
Languages
- SpanishNative
- EnglishFluent
- GermanBasic