Gaspar O. Email & Phone Number

La Trinidad, Provincia De Buenos Aires, Ar

Buenos Aires

As the lead of the "Security Champions" program, I play a key role in integrating security practices throughout the Software Development Life Cycle (SDLC). My responsibilities include promoting security awareness within development teams, conducting regular penetration tests, and leveraging tools such as SAST and DAST to identify and address vulnerabilities. I ensure the company’s proprietary code adheres to the highest security and regulatory standards. Additionally, I collaborate with cross-functional teams to design and implement effective security strategies, fostering a culture of proactive security across all stages of development.

As a Security Consultant, I specialize in helping clients identify and mitigate security risks through a range of skills and expertise, including:Security best practices and standardsPenetration testing using Kali LinuxSecurity event analysisSmall-scale automation and scriptingDevOps securityCybersecurity risk managementI have experience working with clients remotely, delivering high-quality services and results. I pride myself on being detail-oriented, thorough, and communicative, ensuring that my clients have a clear understanding of the work I perform and the value it provides.As a freelancer and independent professional, I value collaboration and working closely with my clients to understand their unique needs and goals. My experience and skills allow me to provide clients with tailored solutions that are effective, efficient, and aligned with their objectives.I stay up-to-date with the latest industry trends and advancements in technology, ensuring that my clients benefit from the most current and effective security strategies and practices available.

Clients: Anomalous LLC, M3-Security

As an AppSec Engineer, I was a vital member of the Application Security team that emulated real-life attacks according to each client's requirements. My responsibility was to identify vulnerabilities that affect their business model and provide support during the mitigation process. I was in charge of planning, executing, monitoring, and presenting projects. My tasks included:Conducting penetration testing on web and mobile applications.Evaluating internal and external networks.Spear phishing.OSINT (Open-Source Intelligence) gathering.Threat modeling.Writing and presenting technical and executive reports.Delivering training and awareness sessions to clients.Generating content to support security training initiatives.Providing customer support.My role required a combination of technical expertise and strong communication skills to effectively communicate findings to clients and colleagues. I found the work to be both challenging and rewarding, and I'm proud of the contributions I made to the team's efforts to improve application security for our clients.

As a DevOps Engineer, I specialized in designing and implementing cloud-based solutions with a strong focus on automation and security. I was proficient in several tools and technologies, including:AWS (Amazon Web Services)Gitlab CI/CDGitOpsDockerTerraform and Terragrunt modulesKubernetesHelmIn addition to my technical skills, I had experience with cybersecurity tasks, such as vulnerability scanning and threat modeling. I also gained experience in documenting projects for PCI-DSS compliance. This involved ensuring that all security controls were in place and that evidence was available to demonstrate compliance with the standard.My experience with these technologies and tasks allowed me to work effectively with cross-functional teams to deploy, maintain, and secure complex infrastructure systems. I took pride in staying up-to-date with the latest industry trends and regularly sought out opportunities to learn and grow. Throughout my time as a DevOps Engineer, I successfully implemented solutions that improved operational efficiency, enhanced security, and streamlined processes for my team and the organization as a whole.

Buenos Aires Y Alrededores

-NodeJS-SailsJS MVC-MySQL-Docker-JWT-Git flow-SCRUM, jira

Bsc + Mbsc

Education record

Ethical Hacking Expert

Comit

High School