Javier Sánchez

I'm

About

I'm a very brisk and dynamic person with an interest in the world of cybersecurity and in continuous learning. I'm currently very interested in the security of cloud computing environments.

Cybersecurity Engineer & Cloud Security Architect

Due to both my academic background and my additional training, I've managed to have an end-to-end vision of cybersecurity in IT and OT environments. With it, I apply the security by design approach in every task I do day-to-day.

I always seek excellence in everything I do. That's why I passed both Cryptography and the End of Degree Project (Adaptive security for cloud apps) with honours.

  • Degree: BEng in Cybersecurity
  • City: Madrid, Spain

I stand out for my teamwork skills and my ability to work well under pressure and through unknown areas. I know how to organize myself well and make the most of my time.

My nature is very competitive, always prioritizing the collective benefit over the individual, and helping and collaborating with the people around me in everything I can.

I also like to participate in CTF competitions and work on personal projects to be active. It helps me apply the theoretical knowledge I learn and discover new things that I didn't know before.

Skills

Check some of the skills that give me value as a cybersecurity and Cloud professional.

AWS & Azure environments
Infrastructure as Code
GitHub & GitLab CI/CD
Java & Python
Windows & Linux environments
Communication networks
German
English

Professional Experience

Although my career isn't very large, I've tried to learn and contribute the most I could in every task I've carried out.

Research support staff

Apr. 2023 – Present

King Juan Carlos University, Madrid, SP

Junior Cloud Security Architect

May 2022 – Mar. 2023

Entelgy Innotec Security, Madrid, SP

  • GitHub Actions (CI/CD) and source code management.
  • Security validation of AWS and Azure Landing Zones.
  • Definition and prioritization of custom Cloud security frameworks.
  • Deployment of static page generators with project documentation.
  • Policies configuration in Microsoft 365 Defender.
  • Performance of Cloud security best practices assessments, including CIS Benchmarks.
  • Use and rules definition of Dome9, a Cloud Security Posture Management tool (CSPM).
  • Deployment of Prisma Cloud, a Cloud Native Application Protection Platform (CNAPP).
  • Elemental management of Microsoft Intune, an endpoint management platform.
  • Antivirus migration plans and deployment of Microsoft Defender for Endpoint as an EDR solution.

Internship as a Junior Cloud Security Architect

Feb. 2022 – May 2022

Entelgy Innotec Security, Madrid, SP

  • Generation of hardened Amazon Machine Images (AMI) with Packer.
  • Use of Lacework and Tenable.ad, Cloud Native Application Protection Platforms (CNAPP).

Education

As I'm a very active person, in order to complement my academic degree and develop my soft skills, I try to attend different courses, pass some certification exams, give some workshops, and much more.

Academic education

Bachelor of Engineering in Cybersecurity

Sep. 2018 – Jul. 2022

King Juan Carlos University, Madrid, SP

  • Analysis and application of security frameworks and standards.
  • Development of cyber risk identification, analysis and management strategies.
  • Cybersecurity capabilities such as pentesting, malware analysis, database security, secure coding, etc.
  • Passed Cryptography subject with honours.
  • Passed the End of Degree Project (Adaptive security for cloud apps) with honours.

Further training

Lacework Shield Cloud Security Assessment Certification

Mar. 2023

Lacework, Inc.

Show certificate

Lacework Shield Associate Certification

Mar. 2023

Lacework, Inc.

Show certificate

Lacework Shield Foundational Certification

Mar. 2023

Lacework, Inc.

Show certificate

AWS Certified Cloud Practitioner

May. 2022

Amazon Web Services (AWS)

Show certificate

Tenable Certified Sales Engineer – Tenable.ad

Apr. 2022

Tenable, Inc.

Tenable Certified Sales Associate – Tenable.ad

Apr. 2022

Tenable, Inc.

B2 Level of English

Jun. 2021

Official Language School Raymond of Toledo

Cyber Security Foundation Professional Certificate (CSFPC)

Jan. 2021

CertiProf

Show certificate

Scrum Foundation Professional Certificate (SFPC)

Jan. 2021

CertiProf

Show certificate

C1b3rWall Academy 2020

Jun. 2020 – Dec. 2020

Spanish National Police Academy, Ávila, SP

Remote training

Android: Introduction to programming

Jun. 2020

Polytechnic University of Valencia, Valencia, SP

50 remote hours

Show certificate

Technical training in 3D printing

Jul. 2019 – Aug. 2019

Toledo Chamber of Commerce, Toledo, SP

150 face-to-face hours

Volunteering & other activities

Speaker in HackOn 2023

Feb. 2023

King Juan Carlos University, Madrid, SP

  • Teacher of a workshop of introduction to Linux hardening, using Lynis y Ansible.
  • All content is publicly available at GitHub.
  • More information is available in the event website.

Finalist in IV Interuniversity League of challenges in the cyberspace: National CyberLeague

Nov. 2022

University Center of the Guardia Civil, Aranjuez, SP

  • Ranked among the top 6 in the 4th edition of the National CyberLeague, a multidisciplinary team competition that deals with technical, legal, communication and physical hacking disciplines in cybersecurity.

Speaker in C1b3rWall

Jun. 2022

Spanish National Police Academy, Ávila, SP

  • Teacher of a workshop of introduction to cybersecurity CTF competitions.

Founder and organizer of HackOn

Oct. 2018 – Mar. 2022

King Juan Carlos University, Madrid, SP

  • Cybersecurity awareness and divulgation event, with more than 300 attendees in each edition.
  • Coordinator of all the event, speakers and volunteers.
  • More information about the event is available in its website.

Teacher of Introductory course to CTF competitions

Oct. 2021 – Dec. 2021

King Juan Carlos University, Madrid, SP

  • Teacher of the course, giving 24 hours of training to more than 150 students in an altruistic way to contribute to cybersecurity education and awareness.
  • All content is publicly available at https://urjc-ctf.github.io/web/.

Finalist in III Interuniversity League of challenges in the cyberspace: National CyberLeague

Dec. 2021

University Center of the Guardia Civil, Aranjuez, SP

  • Ranked among the top 15 in the 3rd edition of the National CyberLeague, a multidisciplinary team competition that deals with technical, legal and communication disciplines in cybersecurity.

Finalist in II Interuniversity League of challenges in the cyberspace: National CyberLeague

Dec. 2020

University Center of the Guardia Civil, Aranjuez, SP

  • Ranked among the top 10 in the 2nd edition of the National CyberLeague, a multidisciplinary team competition that deals with technical, legal and communication disciplines in cybersecurity.

Finalist in I Interuniversity League of challenges in the cyberspace: National CyberLeague

Nov. 2019

University Center of the Guardia Civil, Aranjuez, SP

  • Ranked among the top 10 in the 1st edition of the National CyberLeague, a multidisciplinary team competition that deals with technical, legal and communication disciplines in cybersecurity.

Community Development Volunteer

Oct. 2018 – May. 2019

Alcorcon Foundation University Hospital, Madrid, SP

  • Accompaniment and care of admitted patients.

Speaker in Are you sure you're sure?

Mar. 2019 – May. 2019

King Juan Carlos University, Madrid, SP

  • Informative talks and workshops for ESO students on Internet security.

Personal Projects

Some of my public personal projects that I develop in my free time. More of them are available in my GitHub profile. Many more will come in the near future...

Adaptive security for cloud apps

End of Degree Project, developing an adaptive security infrastructure in AWS. References will be added soon.

Server hardening

Ansible playbook for hardening a server, created for an Attack&Defense Capture The Flag (CTF) cybersecurity competition.

Scriptable Widgets

Widgets for displaying important information in your iOS device home screen.

This website deployment

Development and deployment of this CV website, using GitHub Pages and CodeQL SAST analysis.

HackOn website

Website for HackOn, a cybersecurity awareness event, deployed with GitHub Pages.

URJC CTF course website

Website for URJC competitive Capture The Flag course, where I also took part as a teacher, training students in CTF competitions.

Work in Progress

I'm currently working in more projects that will be made public and added here soon.

Contact

Location:

Madrid, SP