I am a Software Engineer and DevSecOps Specialist with over 4 years of experience building scalable web architectures and implementing automated application security across the software development lifecycle (SDLC). My background bridges full-stack engineering with modern DevSecOps practices, helping cross-functional teams shift security left without slowing down delivery velocity.

Currently serving as a DevSecOps Engineer at Devel Group, I conduct end-to-end SAST and DAST assessments across web, mobile, and infrastructure layers utilizing enterprise tools such as Fortify SCA, Burp Suite, OWASP ZAP, and Trivy. I specialize in automating vulnerability scanning, running Infrastructure as Code (IaC) security reviews, and embedding automated security gates directly into Azure DevOps CI/CD pipelines using Python and PowerShell scripts.

Prior to focusing on AppSec, I developed, optimized, and deployed full-stack systems at Trez Labs and Producciones Roma. My engineering foundation spans RESTful API design, database architecture, and microservices across diverse stacks, including Node.js, React, Python (Django/Flask), PHP (Laravel), Java (Spring Boot), and C# (.NET). This developer background gives me an authentic understanding of code maintainability, debugging, and secure coding standards.