Alejandro A.
Murcia, Spain · Offensive Security Engineer - Penetration Tester · VASS · Telefónica Tech project
IES Aljada
1 follower
About
Offensive Security Engineer with experience in hands-on penetration testing across web, mobile, API, Active Directory, and perimeter infrastructure. Certified OSCP, OSEP, OSWP, and BSCP, with daily expertise using Burp Suite as a primary attack proxy. Published CVE author and 0-day researcher, chaining findings to demonstrate real business impact, currently delivering offensive engagements for Telefónica Tech.
Skills
- Web, mobile, API, Active Directory, and infrastructure penetration testing
- red team and adversarial simulation
- manual exploitation and post-exploitation
- control-evasion techniques
- 0-day and vulnerability research
- OWASP Top 10 (Web, API, Mobile)
- authentication/authorization flaws
- injection (SQLi, XSS, SSRF, object deserialization)
- HTTP request smuggling
- business-logic flaws
52 skills in total
Experience
-
Offensive Security Engineer - Penetration Tester
VASS · Telefónica Tech project
Dec 2025 — Present
Madrid (Remote)
-
VASS
-
Offensive Security Engineer
Dec 2025 — Present
Provincia de Madrid
-
Offensive Security Engineer
Dec 2025 — Present
Provincia de Madrid
-
11 experiences in total
Education
-
IES Aljada
Higher Technical Diploma, Network Systems Administration (ASIR)
Sep 2021 — Jun 2023
-
I.E.S Aljada
ASIR (Administración de Sistemas Informáticos en Red), Informatics
Jan 2021 — Jan 2023
3 education entries in total