Bug Bounty Hunting on part-time while selectively applying for open roles and maintaining a blog.

As a Technical Manager of Software Development teams I knew I was proficient in Software Development and Testing but my Cybersecurity knowledge needed to improve. This is the period to address it to become a more complete IT professional. I am taking courses and looking for challenges to validate my newly acquired skills by applying to intermediate/professional level certifications in the field.

I completed more than 10 courses and 3 certifications in the areas of: Web Application Pen Testing, Mobile Pen Testing, API Pen Testing, OSINT, DevSecOps and 1 in IoT and Hardware Hacking.

Was responsible for making sure the projects were delivered on time and with quality. Led Development and QA teams, removing impediments and being hands-on when required. Negotiated the scope for the releases with the clients. Was the point of contact regarding internal team allocation. Defined development policies, conducted one-on-ones and contributed to the recruitment effort.

A foray into leadership from a Team Leader position that required shifting priorities and changing the mindset from efficiency to tasks/decisions with business impact. Needed to learn how to choose my battles wisely. Ended up mediating some discussions since it was easy for me to see both sides of a coin. Risk assessment was also a natural recurring thought in me that was very useful for the position.

As a Team Lead I am very proud of the work made as the extension of the Presto development team and in the project our team helped delivering and maintaining for Kaiser Permanente.

Was part of a team developing a web application in the area of network security. The application allowed the deployment of honeypots of commonly used services in Docker containers to investigate and dissect the activity from attackers. Since it was a start-up, I was able to work with a wide range of tech: Django, Flask, a bit with Angular, Docker, the ELK Stack, SQLite, Jenkins, Apache, RabbitMQ and Qemu.

Was responsible for the maintenance of an Android TV application in the area of RCS (Rich Communication Services). The work was native Android development with Java. The biggest differences from regular mobile development were the size of the screens and working with the key codes from the remotes instead of with touch events.