██████╗ ██████╗ ██████╗██╗ ██╗███████╗████████╗ ███╗ ██╗██╗ ██╗ ██████╗ ██████╗ ███████╗████████╗ ██╔══██╗██╔═══██╗██╔════╝██║ ██╔╝██╔════╝╚══██╔══╝ ████╗ ██║██║ ██║██╔════╝ ██╔════╝ ██╔════╝╚══██╔══╝ ██████╔╝██║ ██║██║ █████╔╝ █████╗ ██║ ██╔██╗ ██║██║ ██║██║ ███╗██║ ███╗█████╗ ██║ ██╔═══╝ ██║ ██║██║ ██╔═██╗ ██╔══╝ ██║ ██║╚██╗██║██║ ██║██║ ██║██║ ██║██╔══╝ ██║ ██║ ╚██████╔╝╚██████╗██║ ██╗███████╗ ██║ ██║ ╚████║╚██████╔╝╚██████╔╝╚██████╔╝███████╗ ██║ ╚═╝ ╚═════╝ ╚═════╝╚═╝ ╚═╝╚══════╝ ╚═╝ ╚═╝ ╚═══╝ ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝ ╚═╝
📖 Professional Summary
- Computer Systems Engineering graduate from UDLAP (2021 - 2025, 9.0/10) with almost 2 years of hands-on experience in cybersecurity.
- SOC/MDR analyst at TBSeK. I triage and correlate alerts across client environments and escalate what needs an owner.
- President of Hackztecs, the UDLAP security group, where I lead the CTF team.
- I'm open to SOC, MDR, and SRE roles. Remote or hybrid.
🏆 Specialties
- 🛡️ SOC / MDR analysis
- 🚩 CTF team leader
- ⚙️ DevOps & infrastructure
- 💻 Software development
- 🤖 AI research
👨💻 About Me
- 👨 He/Him
- 🇲🇽 Mexican, based in Puebla
- 🗣️ Languages: Spanish (native), English (C1+), French (A2), German (A1)
🌱 Currently Learning
- 🔐 CompTIA Security+ (in progress, not yet earned)
- ☁️ AWS Cloud Practitioner and GCP (studying)
- 🏗️ Terraform
- 🧰 Ansible, Puppet, and Chef
Security: Splunk, Darktrace, CrowdStrike, Cisco AMP, Cisco Umbrella, GroupIB, Wireshark, Burp Suite, Nmap, Ghidra, Metasploit, dark web OSINT, basic Linux/macOS hardening, SDR bench (HackRF One, bladeRF 2.0).
DevOps: Docker, Docker Compose, Kubernetes, CI/CD, Cloudflare (Tunnels, Workers, D1), Git, Linux, Raspberry Pi.
Development: TypeScript, JavaScript, Python, Node.js, React, Next.js, Angular, Deno, Swift/SwiftUI, Kotlin, SQLite, MySQL, Firebase, Supabase.
- SOC/MDR Analyst @ TBSeK (Jul 2026 - Present, remote, full-time)
- Alert triage and correlation with Splunk, Darktrace, CrowdStrike, Cisco AMP, Cisco Umbrella, and GroupIB. Wireshark when the question is the packet.
- Support detection, evidence, and first containment steps on live cases. Moved repetitive parts of the shift into internal scripts.
- Jr. SOC Analyst @ TBSeK (Apr 2025 - Jul 2026, remote, part-time)
- Triage across 7+ client environments, false-positive filtering, an incident response playbook, and dark web OSINT.
- Automated reports with Python, Node.js, Streamlit, and Selenium: about 70% less time on those reports.
- Researcher and Developer @ STEM UDLAP (Feb 2024 - Jun 2026, hybrid)
- Co-authored the MICAI paper and dataset. Ran the lab server on a Mac Mini, published services with Cloudflare Tunnels, moved old Angular and Node apps to Docker, and set access rules and basic hardening.
- Software Engineer Intern @ T-Systems México (Apr 2024 - Jul 2024, hybrid, part-time)
- Built a course platform to track training with Angular and MySQL.
- President @ Hackztecs (Feb 2024 - Present)
- Treasurer @ Computer Systems Engineering student board (Aug 2024 - May 2025)
- HTB University CTF 2025 "Jingle Trouble" (Nov 2025): 52nd of 1,014 teams (top 5%). The only Mexican university in the top 100.
- HTB Cyber Apocalypse CTF 2025: 51 of 77 challenges, 34,125 points, rank 293 (top 3.5% worldwide, 3rd in Mexico).
- MAIA (Nov 2024): 1st place of 22 teams in the ÖBB challenge at an AI and mobility hackathon in CDMX. Prize: a trip to Austria. TypeScript, Next.js, Supabase, Groq.
- WayZT (Feb - Mar 2024): 1st place at a SwiftUI hackathon with an iOS app using Core ML and MapKit.
- ColorScore (Nov 2025): 1st place, Enactus Changemakers accessibility track. SwiftUI, Core ML, K-means.
- Published Research: Easy for Us, Complex for AI: MICAI 2024, Springer LNCS 15246, pp. 198 - 209. Dataset of 4,368 images built on COCO, MIT license.
- CONISOFT 2025 workshop (UABCS, IEEE Computer Society): "Models under attack: backdoors, manipulation, and analysis of malicious AI".
- pocketnugget.xyz: my portfolio, a Windows 98 style desktop on Vite, TypeScript, and a Cloudflare Worker with D1. Plus a home server on a Raspberry Pi with Docker.