CV

Andrés Gómez Ramírez

andres.gomez@sakundi.io
San José, , CR

Summary

Cybersecurity engineer, security researcher, and senior DevOps/cloud infrastructure engineer with 15+ years of experience across penetration testing, vulnerability research, intrusion detection, applied AI for security monitoring, and large-scale cloud & HPC infrastructure. PhD in Cybersecurity (Goethe University Frankfurt, in collaboration with CERN). Co-Founder & CEO of Sakundi.

Education

  • Computer Science (Cybersecurity)
    2019
    Goethe University, Frankfurt am Main, Germany
  • Blockchain Security
    2021
    Blockchain Training Alliance
  • Computer Science
    2011
    Universidad de Antioquia, Medellín, Colombia

Work Experience

  • Part-Time Professor, Security/Blockchain
    2026 - Present
    Costa Rica Institute of Technology (TEC)
    Teach within the Cybersecurity Master's program, covering blockchain security fundamentals.
  • Security & DevOps Developer
    2025 - 2026
    Modulo Labs
    Analyzed and developed cryptographic code and smart contracts for Panther, a privacy-enhancing protocol, with a focus on security review. Managed deployment pipelines and infrastructure for the protocol on the Polygon ecosystem.
  • Co-Founder & CEO
    2020 - 2025
    Sakundi ÖU
    Founded and lead a security, privacy, and digital identity startup, setting technical direction and client strategy. Deliver security audits, monitoring solutions, and identity infrastructure to enterprise and protocol clients. Designed and maintained reproducible, auditable deployment pipelines and infrastructure-as-code for client environments.
  • Blockchain DevOps Engineer
    2020 - 2025
    Edenia
    Designed, deployed, and maintained Linux-based on-premise and cloud infrastructure on AWS (EC2, EKS, S3, IAM, VPC) for blockchain-focused products. Provisioned and managed Kubernetes clusters and containerized microservices. Authored Terraform modules for infrastructure-as-code. Built CI/CD pipelines with GitHub Actions. Implemented observability with Grafana and Prometheus. Delivered infrastructure for blockchain ecosystems including EOSIO/Antelope, Ethereum, and Bitcoin networks.
  • DevOps Engineer
    2013 - 2020
    Goethe University Frankfurt / CERN (ALICE Experiment)
    Built and maintained the security monitoring and infrastructure management system for the ALICE High-Level Trigger (HLT) computing cluster using Zabbix. Managed infrastructure-as-code and configuration management using Puppet and Ansible, enforcing hardened baselines across hundreds of compute nodes. Worked with Vagrant and OpenStack for virtual environment provisioning; contributed to the HLT read-out upgrade for LHC Run 2 (published in JINST).
  • PhD Researcher, Computer Science (Cybersecurity)
    2013 - 2019
    Goethe University Frankfurt / CERN
    Researched deep learning (generative models) and isolation-based methods for intrusion detection and prevention on the Worldwide LHC Computing Grid (WLCG). Built a Python/Perl framework implementing the research; co-authored 3 peer-reviewed papers from this work.
  • Security Researcher
    2011 - 2013
    Fluid Attacks
    Performed infrastructure assessments, penetration tests, source code audits, and vulnerability assessments for banks, software development companies, and ISPs. Identified and reported multiple CVEs, including a Microsoft DirectShow memory-overwrite vulnerability (MS13-056).

Skills

Offensive Security

  • Penetration testing
  • Source code auditing
  • Fuzzing
  • Vulnerability research
  • Exploit development
  • Ethical hacking
  • CVE research

Defensive Security

  • Intrusion detection & prevention
  • Security monitoring for distributed/grid systems
  • Distributed digital identity
  • CIS hardening
  • IAM least privilege
  • SSH key management
  • MFA
  • Vulnerability scanning

Cloud & Infrastructure

  • OpenStack
  • AWS (EC2, EKS, S3, CloudWatch, IAM, VPC)
  • Multi-account environments
  • Linux (Debian, Ubuntu, CentOS, Tails)

Containers & Orchestration

  • Docker
  • Kubernetes (EKS)
  • Helm
  • Containerized microservices deployment

CI/CD

  • GitLab CI (pipelines, downstream, multi-project)
  • GitHub Actions
  • Jenkins

IaC & Configuration Management

  • Terraform
  • Puppet
  • Ansible
  • Foreman
  • Vagrant

Monitoring & Observability

  • Grafana
  • Prometheus
  • Zabbix
  • AWS CloudWatch
  • ELK Stack

AI / ML for Security

  • Deep learning
  • Machine learning
  • NLP
  • TensorFlow
  • Keras
  • scikit-learn
  • pandas
  • NumPy
  • SciPy
  • Gensim

Programming & Scripting

  • Python
  • Bash/Shell
  • JavaScript/Node.js
  • Perl
  • C/C++
  • Java
  • Solidity

Blockchain

  • Ethereum
  • Bitcoin
  • Polygon
  • Antelope (EOSIO)
  • Dash
  • Nym
  • Validator/node infrastructure
  • Zero-knowledge proofs

Publications

  • Tikuna: An Ethereum Blockchain Network Security Monitoring System
    2023
    ISPEC 2023, Springer LNCS vol. 14341
    AI-based security monitoring system for the Ethereum P2P network (nodes & validators).
  • Arhuaco: Deep Learning and Isolation Based Security for Distributed High-Throughput Computing
    Journal of Grid Computing
    PhD thesis project at CERN, with the ALICE Collaboration.
  • A Security Monitoring Framework for Virtualization Based HEP Infrastructures
    2017
    Journal of Physics: Conference Series, 898(10)
    With the ALICE Collaboration.
  • The ALICE High-Level Trigger Read-Out Upgrade for LHC Run 2
    2015
    JINST, IOP Publishing
    With the ALICE Collaboration.
  • Intrusion Prevention and Detection in Grid Computing — The ALICE Case
    2015
    Journal of Physics: Conference Series, 664(6)
    With the ALICE Collaboration.
  • O2: A Novel Combined Online and Offline Computing System for the ALICE Experiment
    2014
    Journal of Physics: Conference Series, 513(1)
    With the ALICE Collaboration.

Teaching

  • Blockchain Security Fundamentals
    2026
    Costa Rica Institute of Technology (TEC)
    Role: Part-Time Professor, Cybersecurity Master's program

Portfolio

  • Tikuna
    Portfolio
    AI-based security monitoring system for the Ethereum P2P network (nodes & validators), funded by an Ethereum Foundation Academic Research grant.
  • Arhuaco
    Portfolio
    PhD thesis project at CERN: deep learning and isolation-based intrusion detection for distributed high-throughput computing.
  • Zikuani
    Portfolio
    Privacy-preserving identity verification system using zero-knowledge proofs. Backed by ZK Bankai and Polygon; DIF 2025 hackathon winner. Includes its own cloud deployment infrastructure and CI/CD pipeline.
  • ZK Voto Digital
    Portfolio
    Secure voting system using Zikuani to verify voter eligibility (humanity, citizenship, age) without exposing personal identity.

Languages

  • Spanish
    Native
  • English
    Fluent
  • German
    Basic