root@alvarodiaz:~$ whoami
Álvaro Díaz Hernández
// Security Engineer
Computer engineer & offensive security professional with 9+ years auditing web, infrastructure, mobile, blockchain and AI systems.
Co-founder of Red4Sec · now Security Engineer at Magnific / Freepik.
CTF player & admin of the Underc0de community.
# about me
cat /etc/profile
- Computer engineer specialised in offensive security & penetration testing, 9+ years in the field.
- Security Engineer at Magnific / Freepik and co-founder of Red4Sec.
- Experience across web & infrastructure, red teaming, source-code review, mobile (iOS/Android), blockchain & smart contracts, and AI security audits.
- Administrator of Underc0de.org and speaker at HoneyCon, Qurtuba, MorterueloCon & PilarCon.
- Multiple published CVEs, vendor Hall-of-Fame recognitions and national/international CTF titles.
# career
history --all · professional experience
03/2025 — present
Security Engineer
Magnific / Freepik · Málaga
- Web & infrastructure audits
- Ethical hacking & red teaming
- Source code & AI security audits
- LLM & MCP security audits
- Mobile application audits (iOS, Android)
- Incident response
07/2018 — 03/2025
Co-Founder & Senior Security Analyst
Red4Sec
- Web & infrastructure audits, red teaming
- Source code audits
- Mobile application audits (iOS, Android)
- Blockchain & smart-contract security audits
05/2018 — 12/2018
Senior Security Analyst
Informática El Corte Inglés (IECISA)
- Penetration testing & red team
- Web & mobile application audits (iOS, Android)
- WiFi audits & vulnerability assessments
- System and threat monitoring
12/2016 — 05/2018
Security Analyst
Deloitte España
- Penetration testing
- Web & mobile application audits (iOS, Android)
- Source code audits
06/2016 — 12/2016
IT Security Analyst
Telefónica Soluciones de Outsourcing
- Real-time security event analysis & monitoring
- 24x7 services: DLP, MSSP, system monitoring
- Incident response · SIEM tools
// education
Bachelor of Computer Sciences
University of Wales Trinity Saint David
Graduated with Honors (First Class)
MSc in Cybersecurity & Cyberdefense (International)
Universidad CEU San Pablo
GPA 8 / 10
Higher Technician in Web Application Development (DAW)
IES Mare Nostrum
GPA 8.4 / 10
Technician in Microcomputer Systems & Networks (SMR)
Cots Alicante
GPA 8.7 / 10
# certifications
ls -la ~/.certs
OSCP
Offensive Security Certified Professional · 2018
OSWE
Offensive Security Web Expert · 2021
OSWP
Offensive Security Wireless Professional · 2019
# cves & disclosures
grep -r "CVE-" /published — 7 assigned identifiers
# acknowledgements & awards
Competitions, talks, Hall of Fame listings & press
- ICSC 2018 — 1st place with the Spanish national team at the Ibero-American CyberSecurity Challenge.
- ECSC 2018–2022 — competitor in the European CyberSecurity Challenge.
- Bitácoras Awards — winner, Best IT Security Blog (Follow The White Rabbit); finalist with Underc0de.
- CyberCamp / INCIBE — winner of the Secure Development tournament (2016).
- Speaker at HoneyCon, Qurtuba, MorterueloCon & PilarCon.
- Writer at the security blog Follow The White Rabbit and administrator of Underc0de.
# contact
Feel free to reach out