5+ years building and securing production web apps with React, Next.js, and AWS. GIAC certified (GFACT + GSEC). Currently delivering secure, cloud-native applications and AI integrations for clients across the US and Spain.
GIAC GFACT + GSEC Certified · Pursuing GCIH · US Work Authorized
Where software engineering meets security
Originally from Spain with a degree in architectural engineering from IE University. I spent nearly 6 years in the commercial construction industry, working in engineering, CAD drafting, and project management, before pivoting into software engineering and never looking back.
Now a security-focused engineer with deep experience in cloud technologies and application security, recently earning the GIAC GFACT and GSEC certifications through the SANS Institute as part of the SANS Cyber Academy scholarship.
In addition to traditional web development, I work with AI-enabled features, including LLM integrations and automation workflows, always with a security-aware mindset around data handling, access control, and responsible AI usage.
Currently building and securing cloud-native applications at GDNA, with a focus on secure API design, least-privilege IAM, and production-grade AWS architecture. Next up on the certification path: GIAC GCIH. Always open to interesting conversations.
Technologies I reach for every day, and the broader toolkit I bring to projects.
5+ years across startups, agencies, and independent consulting
Started translating Figma designs into React/Next.js code. Evolved into owning full application architecture, API design, and database design on AWS.
Built a client project using Svelte and maintained Querri's HubSpot website with custom code modifications throughout the contract.
Short-term contract to rebuild the company's Shopify storefront. The engagement ended before completion.
First engineering role after JRS Coding School bootcamp. Promoted from Software Engineer I to II. Full-stack development on Angular/NestJs stack with Azure cloud services.
Selected hands-on labs with real packet captures, full analysis, and detailed writeups. Evidence of skill beyond certifications.
Analyzed 173K VPC flow records across 579 log files: isolated 33,232 attacker flows from 20.106.124.93, determined a 6.5-hour attack window, quantified 265MB exfiltrated on port 8889 and 190MB on port 80, and confirmed the full attack surface (HTTP, SSH, 8889) using PCAP-to-NetFlow conversion with nfpcapd/nfdump.
Investigated a 628K-packet PCAP in Wireshark: used protocol hierarchy and conversation statistics to surface a port-80 scanning pattern from 3.142.238.241, followed an HTTP stream revealing a successful WordPress brute-force login (Hydra, admin/#AlphaInc!), and completed a live-capture exercise extracting an HTTP object from loopback traffic.
Discovered a SQL injection in Catalog.php's search parameter (LIKE '%<input>%'), dumped all products, enumerated databases and tables via stacked queries, then deployed the lab WAF and confirmed identical payloads were blocked with HTTP 418.
Analyzed PCAP traffic with tcpdump: identified /.env probing, WordPress brute-force with Hydra, and cleartext login parameters visible in the HTTP payload.
Cracked passwords across 4 hash types using John the Ripper and Hashcat: extracted and cracked an Office 2013 encrypted Excel file, an NTLM hash, and Linux crypt hashes using a CeWL wordlist. Demonstrated brute-force infeasibility against SHA-512 with Hashcat, then used John's word-mangling rules to expand 1,552 base words into 4M+ candidates to crack passwords the original wordlist missed.
Validated Snort 3.1.73 config, tightened HOME_NET to 10.130.0.0/16, ran the community ruleset against investigate.pcap, and surfaced an SSH CRC32 overflow shellcode pattern (294 alerts from 20.106.124.93 → 10.130.8.94:22). Re-ran Snort with a BPF filter pinned to the attacker IP, then processed the same PCAP with Zeek's extract-all-files policy and confirmed log output.
Labs are from SANS Cyber Academy.
Industry certifications and academic foundation
Cybersecurity and system administration program covering security fundamentals, network protection, and infrastructure management.
Intensive full-stack development program. Career pivot from construction to software engineering. Landed first engineering role at Interloop within months of completion.
Technical architecture degree covering structural engineering, construction management, and building design. Final thesis: design and construction technical drawings for a hospital. Foundation for project management and analytical thinking that carried into software engineering.
Selected client and independent work with measurable outcomes
Delivered via GDNA, Querri, and direct engagements
Mentorship platform needed secure, scalable onboarding UX for ~1,200 users.
Built React UI components and AWS Cognito auth with secure session management, input validation, and CDK-managed infrastructure with least-privilege IAM policies.
Onboarding efficiency improved by 60%; secure registration and sign-in flow in production with OWASP-aligned authentication controls.
Side projects and open-source work with live demos and source code
Role: Solo builder: design, full-stack development, AI integration, payments, deployment
Paste any job description and get an honest 0-100 fit score with strengths, gaps, and interview prep. Includes ghost job detection and a job board with AI scores.
Role: Design, full-stack development, deployment (Vercel)
A modern product curation platform with hand-picked Amazon products, reviews, category filtering, and Editor's Choice. Responsive, SEO-optimized, with affiliate integration.
.f3582cb7.png&w=828&q=75)
Role: Design, front-end development, deployment
Modern bilingual marketing site built with Next.js 14, custom i18n, dark mode theming, and Framer Motion animations. Responsive layout with reusable section components.
Role: Full-stack development, database design, deployment
Community-driven platform for sharing and discovering AI behavior rules for Cursor Editor. Rule browsing, creation tools, and file-pattern matching.
Role: Backend, AI integration, scripting/automation
AI-assisted automation for YouTube content workflows using Python and LangChain, reducing manual steps in scripting and planning.
Role: Solo build: concept, design, full-stack development
An unsolicited concept redesign for a bilingual (ES/EN) architecture studio. Project gallery with image carousel, service detail modals, contact form, and Framer Motion animations. Built to practice next-intl routing and minimalist editorial layout. Not affiliated with or endorsed by NEVA Estudio.
Role: Solo build: concept, design, full-stack development
An unsolicited concept redesign for a commercial interiors contractor, exploring modern project gallery UX, service presentation, and local SEO patterns. Built with Next.js 16 and Tailwind CSS. Not affiliated with or endorsed by Coastal Millwork & Supply.
Fit Check
Paste a job description and get an honest AI assessment of how Luis's experience maps to the role.
Let's discuss your next project. Reach out via the form below or connect on LinkedIn