Skip to content
View metorresponce's full-sized avatar

Block or report metorresponce

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
metorresponce/README.md

Available languages / Idiomas disponibles: English / Español

Mariano Enrique Torres Ponce - Technology Risk & Applied Cybersecurity

Technology risk and applied cybersecurity consultant focused on secure technology use, digital exposure analysis, operational reliability, and risk reduction in complex IT environments.

Principal Consultant at Riskentis.
Riesgo Tecnológico is the operational service brand of Riskentis, focused on applied cybersecurity, technology risk, digital exposure analysis, and safe adoption of artificial intelligence.

My work connects technical practice with risk management, secure configuration, observability, infrastructure reliability, and operational decision-making. I combine experience in cloud infrastructure, production operations, automation, and computer law to assess how systems are deployed, exposed, monitored, accessed, and maintained in real environments.

For current work, writing, and public profile:
www.metorresponce.com

Riesgo Tecnológico:
www.riesgotecnologico.com

  • Applied Cybersecurity · Technology Risk · Digital Exposure Analysis
  • Secure Technology Use · AI Risk · Operational Reliability
  • Cloud Infrastructure Review · Observability · Production-Oriented Controls

Highlights

  • Technical labs and practical projects focused on applied cybersecurity, operational reliability, traceability, and risk reduction.
  • Reproducible experiments designed to explore secure configuration, monitoring, infrastructure validation, and safer operational practices.
  • Hands-on work around cloud infrastructure, Kubernetes, observability, automation, and production-oriented controls.
  • A technical portfolio built to connect infrastructure knowledge with cybersecurity, risk management, governance, and operational decision-making.
  • Practical experience translating technical findings into business, legal, and operational impact.

Selected Technical Work

These repositories are designed as reproducible technical demonstrations. They are independent from corporate environments and can be reviewed locally or through GitHub Actions.

The goal is not only to show tooling, but to document how infrastructure, automation, observability, and operational controls can support cybersecurity work, technology risk analysis, incident readiness, and better decision-making.

Infrastructure as Code

  • Terraform Local Demo - Reproducible infrastructure without cloud providers (local + random), with CI validation using fmt and validate.
    terraform-ci

  • AWS Serverless Local Demo - LocalStack-based serverless lab with S3, SQS, and DynamoDB, designed for reproducible integration testing and low-cost validation workflows.
    ci

Kubernetes & Operational Control

  • Kubernetes Admin Ops Kit - Runbooks-as-code for Kubernetes administration, including Ansible playbooks for cordon/drain, ordered restarts, rollback, and CI validation with KinD. Includes operational controls such as probes, PDB, and NetworkPolicy.
    ci

Observability & Reliability

  • FastAPI Observability Demo - FastAPI service exposing /metrics, with tests and CI, designed to explore instrumentation, monitoring, and reliability-oriented validation.
    ci

  • GitHub Observability Demo - Prometheus + Grafana observability stack with exporter-based GitHub metrics collection for dashboards, validation, and monitoring experiments.
    compose-validate

All repositories are designed to be reproducible, easy to review, and independent from corporate environments, so they can be tested locally or through GitHub Actions.

Areas of Focus

  • Applied cybersecurity and technology risk
  • Digital exposure analysis and secure technology use
  • AI risk, safe AI policies, and regulatory impact
  • Cloud infrastructure review and production-oriented controls
  • Operational reliability, incident readiness, and continuity criteria
  • Observability, traceability, and monitoring practices
  • Automation and reproducible technical validation
  • Infrastructure and platform operations in critical environments

Pinned Loading

  1. k8s-admin-ops-kit k8s-admin-ops-kit Public

    Runbooks-as-code for Kubernetes admins: Ansible playbooks (cordon/drain, ordered restarts, rollback), Helm chart (api/worker/nlp with probes, PDB, NetworkPolicy), and CI with KinD.

    Shell

  2. terraform-local-demo terraform-local-demo Public

    Terraform without a cloud provider (local + random). CI with fmt/validate.

    HCL

  3. aws-serverless-local-demo aws-serverless-local-demo Public

    AWS-like serverless on LocalStack (S3 → Lambda → DynamoDB) with unit + integration tests and GitHub Actions CI. No cloud account needed.

    Python

  4. fastapi-observability-demo fastapi-observability-demo Public

    FastAPI + Prometheus metrics (/metrics) with CI (pytest, Docker build, CodeQL).

    Python

  5. github-observability-demo github-observability-demo Public

    Prometheus + Grafana + exporter for GitHub metrics. CI with GitHub Actions.