Final-year Computer Engineering student (Information Technologies) at the University of Seville. I completed an Erasmus exchange at the University of Latvia (February to June 2026).
I am building a portfolio of applied security projects for the banking and fintech sector: system hardening, log analytics, identity and access management, secure development and fraud detection.
| Project | What it does |
|---|---|
| linux-server-hardening-audit | Read-only audit tool that checks a Linux host against 15 hardening controls and maps every finding to DORA, NIS2, GDPR and PCI-DSS |
| cloud-iam-access-review | Reconciles Active Directory, Azure RBAC and HR exports into one identity view and detects overprivilege, orphaned accounts and segregation-of-duties conflicts |
More projects in progress: SIEM log analytics with Splunk, a secure banking API built against the OWASP Top 10, and a transaction fraud detection platform.
- Languages: Python, Java, SQL, JavaScript, R, Bash, PowerShell
- Security: OWASP Top 10, Splunk, Wireshark, system hardening, access control
- Platforms: Linux, Windows, Azure fundamentals
- Practice: Git, VS Code, Agile/Scrum
In progress: ISC2 Certified in Cybersecurity (CC), Microsoft Azure Fundamentals (AZ-900), Cisco Networking Academy (Introduction to Cybersecurity, Python Essentials 1, Linux Unhatched, Data Analytics Essentials), Splunk fundamentals.
Every project uses synthetic data only. Nothing in this portfolio contains real customer, employee or system data. Where a project touches a regulated area, the README states which obligation the work supports and, just as importantly, what is out of scope.
Final year starts in September 2026. Open to cybersecurity internships in banking and fintech.