Building secure systems, cybersecurity tooling, AI-powered defensive solutions, and cloud-native applications.

🇪🇨 Quito, Ecuador

I'm a Computer Science Engineer focused on Cybersecurity, AI Security, DevSecOps, and Full-Stack Engineering.

• 🛡️ Building offensive & defensive security tooling with the goal of becoming a Purple Team Engineer
• 🤖 Exploring AI-powered cybersecurity, deception technologies, honeypots, attack detection, and threat intelligence
• 🔐 Interested in ethical hacking, application security, network security, detection engineering, and secure software architecture
• ☁️ Experience deploying and securing applications using Docker, AWS, Azure, Linux, reverse proxies, and cloud infrastructure
• 💻 Building production-oriented applications with TypeScript, React, Next.js, Node.js, PostgreSQL, and REST APIs
• 🎓 Computer Science Engineer from Universidad San Francisco de Quito (USFQ), Dean's List, with a focus on Data Science
• 🚀 Collaborating with BethaLabs on cybersecurity, software engineering, infrastructure, hosting, and secure deployments
• 🎯 Long-term goal: work at the intersection of Red Team + Blue Team + AI Security

I like breaking systems to understand how they work — and rebuilding them stronger.

A distributed cybersecurity research platform designed to capture, analyze, correlate, and classify malicious activity across multiple protocols.

The platform combines traditional honeypots with AI-assisted deception and centralized threat analysis.

• Captures malicious SSH, HTTP, FTP, MySQL, SMB, MSSQL, MQTT, TFTP and port-scanning activity
• Uses customized Cowrie environments to emulate realistic Linux targets
• Integrates Galah, an LLM-powered HTTP honeypot capable of dynamically generating realistic responses
• Uses Dionaea for multi-protocol attack collection
• Performs cross-protocol attack correlation
• Calculates risk scores per attacker/IP
• Detects automated/bot activity
• Performs automated AI-assisted session classification
• Sends high-risk threat alerts through Discord webhooks
• Tracks distributed sensors using heartbeat/beacon services
• Provides attacker, campaign, sensor and threat visualization through a central dashboard

Attackers
   │
   ├── SSH ──────> Cowrie
   ├── HTTP ─────> Web Honeypot / Galah AI
   ├── FTP ──────> FTP Honeypot
   ├── MySQL ────> MySQL Honeypot
   ├── Scans ────> Port Sensors
   └── Network ──> Dionaea
                       │
                       ▼
                 Vector / Shippers
                       │
                       ▼
                Central Ingest API
                       │
             ┌─────────┴─────────┐
             │                   │
       Threat Analysis       PostgreSQL
       Risk Scoring              │
       Bot Detection             ▼
       AI Classification     Dashboard
             │
             └──────────> Discord Alerts

TypeScript · Next.js · Fastify · PostgreSQL · Prisma · Docker · Cowrie · Galah · Dionaea · Vector · Python · Linux · Caddy

Honeypots · Threat Intelligence · Deception Technology · Network Security · Detection Engineering · Attack Correlation · Risk Scoring · AI Security · SOC Automation

A production-oriented personal finance platform developed to manage expenses, recurring payments, budgets, and financial analytics.

• Multi-user authentication
• Monthly category-based budgeting
• Automated recurring expenses
• Daily and monthly scheduled jobs
• Expense analytics and visualization
• Responsive application architecture
• PostgreSQL-backed persistence

Next.js 15 · TypeScript · Supabase · PostgreSQL · NextAuth.js · Tailwind CSS · shadcn/ui · Vercel Cron

Full-stack hotel management platform designed with a separated frontend/backend architecture and containerized deployment.

Worked on areas including:

• API architecture
• Authentication and authorization
• Secure deployment
• Containerization
• Cloud infrastructure
• Frontend/backend integration
• Production hosting and environment configuration

Built as part of my work and experimentation with BethaLabs.

I also experiment with AI-powered productivity and automation tools, including:

Content generation and automation platform built with TypeScript.

AI-assisted notes and knowledge workflow experimentation.

Automation experiments around programmatic video workflows.

Platform focused on CV/resume workflows and modern web application architecture.

• Purple Teaming
• Penetration Testing
• Detection Engineering
• Threat Intelligence
• AI Security
• Honeypots & Deception Technology
• Network Security
• Web Application Security
• Cloud Security
• DevSecOps
• Security Automation

Cowrie · Dionaea · Galah · Vector · Nmap · Metasploit · Burp Suite · Wireshark

• ☁️ Microsoft Certified: Azure Fundamentals — AZ-900
• 🔐 Microsoft Certified: Security, Compliance & Identity Fundamentals — SC-900
• 🛡️ Palo Alto Networks — Security Operations Fundamentals
• ⚔️ Metasploit Penetration Testing
• 🌐 Cisco — Cyber Threat Management

Red Team      █████████░  Offensive Security
Blue Team     █████████░  Detection & Defense
AI Security   ██████████  AI-assisted security tooling
DevSecOps     ████████░░  Secure infrastructure & deployments
Cloud         ████████░░  AWS / Azure / Containers

I'm currently especially interested in:

Purple Teaming · AI Security · Threat Detection · Honeypots · Security Automation · Cloud Security

Open to cybersecurity, Purple Team, AI Security, DevSecOps and security engineering opportunities.