Cybersecurity for Connected and Autonomous vehicles (UNECE R.155, ISO21434, ...)

Expatriate from SEAT S.A. to CARIAD (VW Group Software Company). Building one scalable tech stack for automated driving, parking, and advanced driver assistance systems. These applications offer best-in-class solutions such as Highway Pilot and Automated Valet Parking.

Head of the Cyber Security Team at Smart Quality Department. The most important achievements were:• Leader of the Team that achieved the first SEAT S.A. UNECE R.155 Cyber Security Management System (CSMS) Certificate of Compliance with the Technical Service and the Approval Authority (MINCOTUR).• Creation from scratch the Cyber Security Team at Smart Quality Department with the objective to lead the activities to evaluate the level of Cyber Security from an End-2-End perspective.• Creation of the Car Security Incident Team unit for the correct management of Cyber Security incidents acting as central coordination to detect, analyze and correct risks and challenges related to product cyber security and as an interface to the others brands of VW Group.• Creation of a Responsible Disclosure Program to manage the central point of contact within the company for external car security incidents and vulnerabilities (vulnerabilty@seat.es).

Some of the highlighted aspects on my experience at EY-ASC are:• Design, develop and implement security solutions to protect companies.• Penetration tests across public and internal networks.• Web security assessments. Using the methodologies: OSSTMM (Open Source Security Testing Methodology Manual) and OWASP (Open Web Application Security Project).• Specialist in mobile security and mobile application test (iOS and Android). • Network-based security assessments.• Researcher of new trends of Malware.• Threat Intelligence and Threat Hunting using the Diamond model and the Cyber Kill Chain.• Network monitoring and experience in vulnerability scanners (Nessus), operation and administration of information security solutions (SIEM), firewalls, antivirus console, antispam, encrypted solutions or IPS/IDS.• Researcher of new methodologies of Vulnerability Management to improve the service that Advanced Security Center gives to his costumers.• Security projects developer as a part of integration of a process to improve security and management of a company.• Social engineering attacks with a subsequent analysis of results to provide preventive measures.• Computer forensics to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the digital information. Usually associated with the investigation of computer crime.• Project Management skills. To ensure efficient communication, team management, personal organization and risk management.

Managing computer security issues and computer network management. Some of the highlighted aspects on the experience at esCERT are:• Development of L.IP.M service. Using ML Algorithms to categorize malicious IPs• Inform about security vulnerabilities and threats• Divulge and make accessible information related to preventing and resolving computer security incidents• Investigate computer security incidents• Educate the community about security• System Security Auditor and Vulnerability Management• Security projects developer• Computer Forensics• Drupal CMS admin