Luis Lozoya

Full Stack Engineer · Security · Cloud · AI

5+ years building production web apps with React, Next.js, and AWS. GIAC GFACT certified. Currently delivering cloud-native solutions and AI integrations for clients across the US and Spain.

ReactNext.jsTypeScriptAWSPythonCybersecurity

Resume

About

Where software engineering meets security

I'm a software engineer with a strong focus on frontend development, cloud technologies, and cybersecurity. I recently earned the GIAC Foundational Cybersecurity Technologies (GFACT) certification through the SANS Institute, validating my knowledge across networking, operating systems, cloud platforms, web technologies, and core security principles.

I bring together real-world software engineering experience and formal security training to design and build applications that are secure by design, scalable, and production-ready.

In addition to traditional web development, I work with AI-enabled features, including LLM integrations and automation workflows, always with a security-aware mindset around data handling, access control, and responsible AI usage.

Currently building full-stack applications and architecting serverless AWS solutions at GDNA. Always open to interesting conversations.

Tech Stack

Main tools and technologies by category.

Frontend

React
Next.js
TypeScript
JavaScript
HTML5
CSS3
Tailwind CSS

Backend

Node.js
Python
Express
REST APIs
PostgreSQL
MongoDB

Cloud & DevOps

AWS
Lambda
S3
Docker
CI/CD
Git
Amplify

Cybersecurity Tools

Wireshark
Burp Suite
OWASP ZAP
tcpdump
Authentication
Secure coding

AI / ML

LangChain
OpenAI API
Prompt engineering
AI integration

Experience

5+ years across startups, agencies, and independent consulting

2024

Software Engineer (Contract)

Current

GDNA

AWS & Cloud Solutions

Apr 2024 to Present

Mount Pleasant, SC

Started translating Figma designs into React/Next.js code. Evolved into owning full application architecture, API design, and database design on AWS.

Key Achievements:

Architecting serverless AWS solutions: API Gateway, Lambda, S3, RDS, Cognito, IAM, Secrets Manager, Amplify
Designing APIs, front-end architecture, and database schemas for client applications
Running weekly client meetings to demo progress and incorporate feedback

Technologies Used:

AWS API GatewayLambdaS3RDSCognitoIAMSecrets ManagerAmplifyReactTypeScriptNext.jsPostgreSQL

2024

Founder

IberiaTech Solutions

Web Development & AI Solutions

2024

Charleston, SC

Independent projects and web development under a personal brand. Built and shipped production sites to explore AI integration, bilingual platforms, and e-commerce.

Key Achievements:

Built and launched iberiatechsolutions.com (bilingual EN/ES) and shopessentialshub.com
Integrated AI features (LLM-powered content, recommendation logic) into projects
Full project lifecycle: design, architecture, implementation, deployment

Technologies Used:

Next.jsReactTypeScriptTailwind CSSAWSNode.js

2023

Software Engineer (Contract)

Querri

Data Analytics & Business Intelligence

Aug 2023 to Apr 2024

Mount Pleasant, SC

Built a client project using Svelte and maintained Querri's HubSpot website with custom code modifications throughout the contract.

Key Achievements:

Built a client-facing project using Svelte and FusionAuth
Modified and maintained Querri's HubSpot website with custom code
Built custom HubSpot CMS modules and templates

Technologies Used:

SvelteHubSpot CMSHTMLCSSJavaScriptFusionAuthAWS

2023

Software Engineer (Contract)

Upstate Nutrition

E-commerce & Wellness

Jul 2023 to Aug 2023

Remote

Short-term contract to rebuild the company's Shopify storefront. The engagement ended before completion.

Key Achievements:

Started rebuilding the Shopify storefront with Liquid templates
Gained experience with Shopify's ecosystem and e-commerce development

Technologies Used:

ShopifyLiquidJavaScriptCSSSEOAnalytics

2021

Software Engineer

Interloop

Data Analytics & Business Intelligence

Jul 2021 to Jun 2023

Charleston, SC

First engineering role after JRS Coding School bootcamp. Promoted from Software Engineer I to II. Full-stack development on Angular/NestJs stack with Azure cloud services.

Key Achievements:

Built custom Chrome extensions integrated with CRM tools using RESTful APIs and OAuth 2.0
Developed and maintained full-stack features using Angular, NestJs, MongoDB, and Azure Cosmos DB
Created Azure Functions with various triggers, reducing infrastructure costs for client workloads
Mentored junior developers and coordinated between development and leadership teams

Technologies Used:

AngularNestJsMongoDBAzure Cosmos DBAzure FunctionsTypeScriptNode.jsREST APIsOAuth2.0

Honest Assessment

Skills Breakdown

Not a wall of logos. Three columns: what I'm strong at, what I can ramp on, and what I'm still learning.

Strong

Daily use, production experience, can mentor others

TypeScript / JavaScript
Primary language for 4+ years
React & Next.js
App Router, SSR, streaming, server actions
Tailwind CSS
Design systems, responsive, dark mode, animations
Node.js & Express
REST APIs, middleware, auth flows
AWS
API Gateway, Lambda, S3, RDS, Cognito, IAM, Secrets Manager, Amplify, CDK. Daily at GDNA
Git & GitHub
Branching, PRs, CI/CD, code review
Linux CLI
Daily driver, scripting, server admin
Security Fundamentals
OWASP top 10, secure coding, security audits

Moderate

Project experience, can deliver with some ramp-up

Python
Scripting, automation, security tools
Angular
2 years production at Interloop
Svelte
Built production features at Querri
Docker
Containerization, compose, not orchestration
MongoDB / Cosmos DB
Used daily at Interloop for 2 years
Supabase
Auth, database, used at GDNA and TalentAgent
Figma
Translating designs to code at GDNA
OpenAI / LangChain
AI integrations, TalentAgent, portfolio chat
Claude
Daily development accelerator at GDNA
Stripe
Payments integration in TalentAgent
Penetration Testing
Labs, write-ups, tools (Burp, Nmap, Wireshark)

Gaps

Honest about what I'm still learning

Kubernetes
Conceptual understanding, no production use
Terraform / IaC
Exposure through tutorials, not hands-on
GraphQL
Read the spec, minimal implementation
System Design at Scale
Learning patterns, not battle-tested
Mobile Development
React Native awareness, no shipped apps
ML / Data Science
Basic understanding, not a practitioner

Certifications

Industry certifications validating security and engineering fundamentals

Verified

GIAC Foundational Cybersecurity Technologies (GFACT)

SANS Institute

January 2026

CybersecurityNetworkingOperating Systems+3

Verified

Introduction to AI

Google (via Coursera)

2025

Artificial IntelligenceAI ApplicationsData Science

Verified

Cybersecurity: System Administration Certificate Program

Purdue University and Ivy Tech

2023

CybersecuritySystem AdministrationNetwork Security+2

Verified

Complete Beginner, TryHackMe

TryHackMe

2023

CybersecurityNetworkingWeb Security+2

Verified

Pre Security, TryHackMe

TryHackMe

2023

Security FundamentalsSecurity ToolsVulnerability Assessment+2

Security Labs

Hands-on labs and evidence of real skill beyond certifications.

SEC401 – Network Forensics

Lab 1.1 – tcpdump Traffic Analysis

Solo, Lab

Analyzed PCAP traffic with tcpdump: identified /.env probing, WordPress brute-force with Hydra, and cleartext login parameters visible in the HTTP payload.

Why it matters: In a real attack, unencrypted HTTP exposes credentials to anyone on the network. This is what defenders see when investi…

Focus: Network ForensicsLevel: SEC401Date: Feb 2026

tcpdumpdigPCAP analysisCLI

Read full write-up

Lab 1.2 – Wireshark Packet Analysis

Solo, Lab

Investigated a 628K-packet PCAP in Wireshark: used protocol hierarchy and conversation statistics to surface a port-80 scanning pattern from 3.142.238.241, followed an HTTP stream revealing a successful WordPress brute-force login (Hydra, admin/#AlphaInc!), and completed a live-capture exercise extracting an HTTP object from loopback traffic.

Why it matters: Wireshark turns raw packets into actionable intelligence. In incident response, the ability to quickly triage hundreds o…

Focus: Network ForensicsLevel: SEC401Date: Mar 2026

WiresharkPCAP analysisDisplay filtersHTTP stream following

Read full write-up

AWS VPC Flow Logs

Solo, Lab

Coming soon

Coming soon.

AWSVPCFlow LogsCloudWatch

Labs are from SANS Cyber Academy.

Portfolio

Selected client and independent work with measurable outcomes

Client Work

Delivered via GDNA, Querri, and direct engagements

Featured

AfricaNXT: Global Mentorship Platform (via GDNA)

Click to view details

AfricaNXT: Global Mentorship Platform (via GDNA)

Problem

Mentorship platform needed secure, scalable onboarding UX for ~1,200 users.

Solution

Built React UI components and AWS Cognito auth, with scalable backend and CDK-managed infrastructure.

Impact

Onboarding efficiency improved by 60%; secure registration and sign-in flow in production.

Tech

React 18AWS CDKCognitoSquid CloudTypeScriptSES

View Live

GSeay, Inc.: Construction Website (via GDNA)

Click to view details

GSeay, Inc.: Construction Website (via GDNA)

Problem

Construction company needed a professional, responsive site with reliable hosting.

Solution

Built and deployed a Next.js site with AWS Amplify; clean layout and fast load times.

Impact

Delivered 2 weeks ahead of schedule; live site supports lead generation and brand presence.

Tech

Next.jsAWS AmplifyTypeScript

View Live

LESS USA: Digital Platform (via GDNA)

Click to view details

LESS USA: Digital Platform (via GDNA)

Problem

Platform needed better performance and a smoother user experience.

Solution

Optimized front-end and deployment; deployed with AWS Amplify for stability and speed.

Impact

Platform performance improved by 30%; clearer UX and faster page loads.

Tech

Next.jsAWSAmplify

View Live

Querri: Dynamic Analytics Platform (Contract Role)

Click to view details

Querri: Dynamic Analytics Platform (Contract Role)

Problem

Analytics platform site needed faster load times and better mobile engagement.

Solution

Built custom HubSpot CMS solutions; optimized assets and front-end code.

Impact

Site speed improved by 35%; mobile engagement increased by 40%.

Tech

HubSpot CMSHTMLCSSJavaScript

View Live

Selected Projects

Independent Projects

Side projects and open-source work with live demos and source code

TalentAgent: AI Job Fit Assessment Platform (2026)

Role: Solo builder: design, full-stack development, AI integration, payments, deployment

Paste any job description and get an honest 0-100 fit score with strengths, gaps, and interview prep. Includes ghost job detection and a job board with AI scores.

Problem: Job seekers waste hours applying to roles that aren't a good fit or are ghost postings.

Approach: Built a full-stack platform with OpenAI for fit scoring, Supabase for data and auth, Stripe for payments, and a job board with pre-scored listings.

Outcome: Live platform that scores fit in 10 seconds, detects ghost jobs, and gives honest 'Don't Apply' signals. Free to use.

Next.js 15SupabaseOpenAIStripeTypeScriptTailwind CSS

View Live

ShopEssentialsHub: Curated Product Recommendation Platform (2025)

Role: Design, full-stack development, deployment (Vercel)

A modern product curation platform with hand-picked Amazon products, reviews, category filtering, and Editor's Choice. Responsive, SEO-optimized, with affiliate integration.

Problem: Users needed a trusted, curated list of products by category instead of browsing generic storefronts.

Approach: Designed and built the full stack: Next.js app, category and filter UX, Editor's Choice section, and Amazon affiliate integration with SEO and responsive layout.

Outcome: Live site with clear categories, fast load times, and monetization path. Demonstrates full-stack and product-thinking skills.

Next.jsReactTypeScriptTailwind CSS

View Live View Code

IberiaTech Solutions: Bilingual Business Website (2025)

Role: Design, front-end development, deployment

Modern bilingual (EN/ES) business site with AI features and responsive design. Increased engagement and expanded reach to Spanish-speaking audiences.

Problem: Business needed a professional, bilingual web presence and clearer way to showcase services and reach both English and Spanish markets.

Approach: Designed and implemented the site with i18n, responsive layout, and AI-powered sections. Used Framer Motion for polished interactions.

Outcome: ~40% increase in engagement and expanded reach to Spanish-speaking audiences. Live site used for client acquisition.

Next.js 14React 18TypeScriptTailwind CSSFramer Motion

View Live View Code

Cursor Rules Hub: AI Community Platform (2025)

Role: Full-stack development, database design, deployment

Community-driven platform for sharing and discovering AI behavior rules for Cursor Editor. Rule browsing, creation tools, and file-pattern matching.

Problem: Cursor users had no central place to find, share, or version rules; everyone was reinventing the wheel.

Approach: Built a Next.js app with Supabase for storage and auth. Implemented rule CRUD, tagging, and pattern-matching logic so rules can be suggested by file type.

Outcome: Live community site for browsing and contributing rules. Demonstrates full-stack work and understanding of developer tools.

Next.js 14SupabaseTypeScriptTailwind CSS

View Live View Code

YouTube GPT Creator (2024)

Role: Backend, AI integration, scripting/automation

AI-assisted automation for YouTube content workflows using Python and LangChain, reducing manual steps in scripting and planning.

Problem: Content creators spend significant time on scripting, research, and planning before recording.

Approach: Built a Python tool using LangChain to automate research and draft scripts from prompts. Integrated with common content workflows.

Outcome: Roughly 40% reduction in manual effort for script and planning steps. Demonstrates AI/LLM integration and automation.

PythonLangChain

View Code

Fit Check

Would Luis be a good fit?

Paste a job description and get an honest AI assessment of how Luis's experience maps to the role.

0 characters

Testimonials

Client feedback

“Luis at IberiaTech does amazing work. He is a skilled developer and really great to work with.”

Dave Ingram

CEO, Querri

Contact

Let's discuss your next project. Reach out via the form below or connect on LinkedIn