José Antonio Carmona Email & Phone Number

Sevilla, Andalucía, España

~ Maintainer of the Bitnami Application Catalog (250+ OSS applications). Hands-on experience with Linux-based, multi-distro, containerized solutions in the form of Docker containers and Helm Charts. This includes providing technical support to the Bitnami community user base and the onboarding of new assets to this catalog.~ Conception, definition, and implementation of the strategy to modernize the testing automation for container and Helm Chart solutions. Use of several Open Source testing frameworks: Cypress, Goss, and Ginkgo via GitHub Actions and VMware Image Builder.~ Development and modernization of the testing pipeline for Helm Chart solutions, based on Groovy.~ Part of the security team, which involves regular evaluation of CVEs, threats, and their impact on the assets. Coordination with the rest of the team for disclosure communications.~ Familiarity with CVE scanning tools such as Trivy and Grype, vulnerabilities analysis and investigation, and the use of standards such as SPDX and VEX.~ Evaluation and creation of Vulnerability Exploitability eXchange (VEX) assessments, reporting to upstream developers when necessary. Performed several educational talks around the VEX topic.

~ AMADEUS Project: Automatic analysis and testing of vulnerabilities in configuration systems based on feature models. This project resulted in a publication in a scientific journal and was the basis for my Cybersecurity Master's Thesis.~ Assistant in the PARGEUS Project: Collaborative Project for the new Organic Law on Personal Data Protection and Guarantee of Digital Rights in the US. * Analysis of publicly exposed endpoints. * Identification of documents and material with sensitive content publicly accessible.

Sevilla Y Alrededores, España

Development of tasks related to the main product of the company: Comerzzia ERP. Among them, the implementation of new simple functionalities, the creation of DB synchronization flows with another external ERP or the performance of quality assurance tests so that the POS complied with the new standards required by AENA.Technologies used: Java, MySQL, HTML, JSP, CSS, JavaScript, SQLServer, PL/SQL, JavaFX, Liferay, Muleflows and Velocity.

Master'S Degree In Information And Communications Security

- Introduction to Security and Digital Identification - Data Network Security (I) - Security in Information Services and Systems - Ethical.

Summer Program In Entrepreneurship & Cybersecurity, 95.77 %

Summer program that brings together different international universities and focuses on the study of cybersecurity and entrepreneurship..

Grado En Ingeniería, Ingeniería Informática - Ingeniería Del Software, 8,92

Honorable Mentions in the following subjects: - Introduction to Software Engineering and Information Systems (10) - Computer Networks (10).