Eduardo Berlanga Email & Phone Number

I perform several penetration tests to servers, webs and APIs using the OWASP methodology.I have performed internal, cloud and active directory pentesting.As part of the pentest team, I make technical and executive reports of vulnerabilities with theirrespective recommendations, in English and Spanish.I have been reporting new CVEs to developers within projects that could affect other customers.Not only that, but I have been exposing new vulnerabilities and new creative exploit methods to thepentest team, to add those tests to all future pentests.I also actively participate in the review and quality control of pentesting reports, making suggestions fortesting, presentation and supplementing the information in the reports to ensure that the client has themaximum understanding of the report.Furthermore, I have changed my working hours to nights so that the pentesting can be performedaccording to the client's needs.In emergency projects such as the data breach, we have met the client's expectations, providingvulnerability, explanation and a recommendation, working even on non-working days.We have been supporting the customer and the A2 safety offices in retesting and making newalternative recommendations to those that were initially made. This is so that the customer can closethe vulnerabilities using another route, which is often easier for the customer.

Mexico

Penetration tests were performed in environments that did not support a high number of requests usingBurp Suite in several targets.Perform Mentoring on pentesting to new team members, development and update on existingmethodologies in the area of pentesting.Actively participated as an analyst in splunk to recognize attacks and malware.Secureworks Taegis VDR Vulnerability Scanner API was used to generate, organize vulnerability scansand generate reports on over 1000 assets.Develop scripts with the pandas library for vulnerability management, as well as periodic reports withprocess graphs.

Using cloud services I created a platform to perform red team style attacks, this platform performedsubdomain enumeration, subdomain discovery, port scanning, fuzzing, vulnerability scanning, takingscreenshots, credential searching, etc.Password spraying was used in different services such as ssh, ftp, mysql, etc.90+ vulnerabilities have been reported to all types of companies.Awarded as a "Most Rewarded" in a Bug Bounty Program, and HoF in few more