Hi, my name is

Alberto de Dios.

Cybersecurity consultant

Cybersecurity consultant for international agencies and Defence at GMV, based in Madrid, Spain.

About Me

I’m a cybersecurity consultant at GMV with 8 years of experience, specialized in securing classified systems, OT environments and infrastructure. I’m currently focused on the aerospace sector as a security architect: designing secure infrastructures, managing cybersecurity and supporting national and European accreditation processes.

Throughout my career I’ve worked on projects for clients in Space, Telecommunications, Banking and Insurance, combining hands-on technical work with project management.

Outside of work I run a self-hosted homelab managed as code, and I publish small open source tools on GitHub. I also write at return-to-libc.com.

Languages: Spanish (native) and English (B2).

Some of the things I work with:

Security architecture
Classified systems and accreditation
OT security
System hardening
Vulnerability management
Project management (PM²)
Networking (Fortinet, Stormshield, Cisco)
VMware ESXi / Horizon
WAF / DBF (Imperva)
Docker and OpenShift
Linux
Scaled Agile Framework (SAFe)

Experience

GMV
Universidad Rey Juan Carlos
Disceltia S.L.

Project Manager & Security Architect in Classified Systems, Hardening and OT - GMV

Jan 2023 - present

Tres Cantos, Madrid, Spain.

Aerospace sector (2023 - present). Security architect for classified systems: vulnerability management, security design and hardening. Deployment and securing of classified systems, preparation for and support during official accreditation by the Spanish ONS (National Security Office), security documentation and review of discrepancies (RIDs) in European environments.
uCyberbolt project (2023 - 2026). Project manager and engineer. Development of a tool that automatically checks the security status of devices and operating systems against different security frameworks.
Internal project (2022 - 2025). Project manager. Deployment of remote access infrastructure for classified information (Stormshield, Fortigate, Cisco, VMware ESXi, VMware Horizon, Bittium SafeMove): servers, operating systems, network cabling and hardening.
Private sector (2023 - present). Project manager. Sanitisation of OT infrastructure (cabling and connectivity upgrades, reorganisation, new equipment, labelling) and secure deletion and replatforming of client equipment.

Security Consultant in Cybersecurity, Virtualization, Information and Data Security

Feb 2018 - Dec 2022

Telecommunications, Insurance and Banking (2018 - 2022). Infrastructure and security administration. Deployment of Imperva SecureSphere and Imperva Cloud WAF, security policies, platform optimization and SecureSphere migration, and expert support.
Banking (2018 - 2022). Deployment of container orchestrators (Docker Swarm, Red Hat OpenShift), container and CI/CD configuration, and expert support.
Aerospace sector (2018 - 2019). Design and deployment of the infrastructure for a Galileo Second Generation PoC: virtualization (VMware ESXi, Docker) and network security (firewalls, switches).

Research collaborator, Face Recognition and Artificial Vision group (FRAV) - Universidad Rey Juan Carlos

Jul 2016 - Jul 2017

FRAV is the Face Recognition and Artificial Vision research group at Universidad Rey Juan Carlos (Madrid, Spain). Its main interests are face recognition, computer vision for traffic and road safety, and computer vision for airport security.

Junior Programmer - Disceltia S.L.

Sep 2013 - Jan 2018

Design and development of VoIP billing software in Java.
Design and development of the connection program for Karel telephone switchboards.
Deployment of Asterisk systems.
Modification of Linux distributions for embedded devices.

Education

2017 - 2018

Master in Cybersecurity

Universidad Carlos III de Madrid

Secure communications, software systems exploitation, data protection, cyber defense systems, cyber attack techniques, risk analysis, identification and authentication, cybersecurity management, malware analysis, persistent threats and information leakage, and computer forensics.

2013 - 2017