Available for product work
Full-stack Developer
I build web and desktop products end to end — with an offensive-security eye that most developers don't ship with.
01 About
I'm a full-stack developer working across Vue, Nuxt, FastAPI and TypeScript — comfortable from database to interaction detail.
I come from AppSec and pentesting, so I read code the way an attacker does: where does trust break, what happens on the unhappy path, what's the input you didn't expect.
These days that instinct goes into building products rather than breaking them — shipping tools that are pleasant to use and hard to abuse.
02 Experience
- Mar 2022 — Present
Penetration Tester
NCC Group · Remote
Web, mobile, cloud and infrastructure pentesting, Kubernetes reviews, scripting and exploit development.
- Jun 2019 — Mar 2022
Fullstack Developer
TopDoctors · Barcelona
Go backend, Vue.js frontend, DevOps pipelines and secure API design.
- Jan 2017 — May 2019
Fullstack Developer
Amaris Consulting · Barcelona
Frontend with React and Angular, backend with NodeJS.
- 2011 — 2017
Fullstack Developer
Various Barcelona companies
JavaScript, PHP, Ruby on Rails and WordPress.
03 Projects
killchain.sh
Attack-chain automation tool that scripts recon-to-exploit pentest workflows into a single repeatable run.
- Bash
- Security
- CLI
04 Stack
The tools I reach for most, day to day.
- Vue
- Nuxt
- FastAPI
- TypeScript
- Tauri
- Svelte
- Python
05 Contact
Got something you're building, or a role in mind? Drop me a line.