Vitrina profesional: writeups de Hack The Box, informes, casos de estudio GRC (ISO 27001/27002/27005/27035, ISO 31000 + MAGERIT), scripts de hardening y roadmap eJPT -> ISO 27001 Lead Auditor -> CISA.
Senior Systems Administrator · Linux Infrastructure · Cybersecurity and ISO 27001 Auditing
Ciudad de la Costa, Canelones, Uruguay LinkedIn · [email protected]
Web showcase (GitLab Pages): this repository self-builds as a static site with GitLab CI — https://portfolio-1e2718.gitlab.io/
Senior systems administrator with 6 years of experience operating critical infrastructure in telecommunications and the public sector (Telefónica/Movistar, AGESIC, Nublit, Dev Biz), with sustained 99.9% availability across more than 200 servers.
Core stack: OpenStack · OpenShift · VMware vSphere · Docker/Kubernetes · Ansible · Veeam · PostgreSQL/MySQL · Nagios · GitLab CI/CD
Ongoing education:
Professional goal: technical GRC — cybersecurity auditing with hands-on infrastructure.
| Folder | Description |
|---|---|
writeups/ | Machines solved on Hack The Box and controlled labs — methodology, reasoning, and tools |
roadmap.md | Complete training path: offensive/audit phases and current progress — the long version, with details |
writeups/ (technical notes) | Credential cryptography and perimeter security/detection (Snort) |
informes/ | Pentesting and incident reports (graduate coursework, controlled labs) |
casos-de-estudio/ | Real projects documented step by step |
scripts/ | Reusable custom utilities (hardening) |
cheatsheets/ | Custom cheat sheets for Bash, Vi, and tcpdump |
libros/ | Reading blog — reviews and personal notes on security and GRC books |
rag-seguridad) — 100% local RAG assistant (Ollama, no cloud) over notes and a library of cybersecurity books: hybrid search, answers with source citations, a phase-guided pentest assistant, and a reindexing monitor. NumPy embeddings, incremental indexing, and documented GPU failure recovery.roadmap.md — Cybersecurity training path (offensive + GRC auditing) with real progress: Starting Point at 100%, personal labs, and upcoming milestones.casos-de-estudio/grc-marco-integral.md — Comprehensive GRC framework integrating ISO 27002 (governance and controls) + ISO 27005 (risk management) + ISO 27035 (incident management): the full governance, risk, and compliance cycle explained with fictional reference micro-cases (anonymous scenarios to anchor each concept). My GRC reference notebook.casos-de-estudio/analisis-riesgos-iso31000-magerit.md — Applied IT risk management: ISO 31000 + MAGERIT, 3-2-1 backups, 3-factor MFA, hardening, and hybrid cloud design. The GRC/defensive side of the portfolio.writeups/red-uoc-lab.md — Guided lab with 3 web targets (Tomcat default-creds → .war reverse shell; SQLi + hash cracking → webshell → SUID privesc → root). Each phase mapped to MITRE ATT&CK, with its defensive counterpart: offensive and defensive in the same document.writeups/shadowgate.md — Custom AD lab (medium-high): ASREProast → Kerberoast → BloodHound → ADCS/ESC8 → domain dump. Full chain mapped to MITRE ATT&CK and ISO 27001.writeups/criptografia-homomorfica-rsa.md — RSA applied to compact set representation (aggregation), membership verification (fixed points), and digital signature (integrity, authenticity, non-repudiation). Verified and corrected calculations.scripts/hardening-ubuntu.sh — Reusable hardening for Ubuntu servers (UFW, SSH, Fail2Ban, auditd, permissions).Everything documented here was executed in personal labs, legal practice platforms (Hack The Box), or authorized academic environments. No third-party system was tested without express authorization.