I also have advanced knowledge in cybersecurity — including attack mitigation, penetration testing, and secure software design — which means I don't just build things that work, I build things that are hard to break.
// tech stack
Skills & technologies
A breakdown of the technologies I work with regularly and my proficiency in each area.
Frontend
- React / Next.jsExpert
- HTML5 / AccessibilityExpert
- JavaScript / TypeScriptAdvanced
- CSS / Tailwind CSSProficient
Backend
- Java / Spring BootExpert
- Python / FastAPIExpert
- Node.js / ExpressExpert
- REST API DesignAdvanced
Tools & Infrastructure
- Git / GitHubAdvanced
- SQL / PostgreSQLAdvanced
- DockerProficient
- Firebase / MongoDBProficient
Cybersecurity
- Attack Mitigation & HardeningAdvanced
- Penetration TestingAdvanced
- OWASP / Vulnerability AnalysisAdvanced
- Network SecurityProficient
// also familiar with
Things I've built
A selection of projects that showcase my skills in building modern, scalable web applications and systems end-to-end.
CAVEX_V2 — Calar Alto Observatory
Renovation of the atmospheric extinction monitoring system at Calar Alto Observatory (Almería). The previous system lacked maintainability and modern integration support, so the observatory commissioned a full rebuild around a microservices architecture.
I designed and developed cavex_imager — the core camera control service — responsible for operating a QHY600 astronomical camera via the INDIGO bus, executing single and scheduled image sequences, streaming real-time telemetry over WebSocket at 1–2 Hz, and coordinating storage of FITS scientific images. The service includes a priority-based lease system for safe concurrent access and structured JSON logging for production observability.
Innovatik
Business website designed and built from scratch, offering two core service lines: custom web development for companies looking to scale, and AI-powered automation to reduce costs and optimise operations.
Fully designed and developed end-to-end — from UI/UX concept to production deployment — with a conversion-focused layout, smooth interactions, and a fully responsive design across all devices.
LocalAudit — Browser-Based Security Toolkit
Free cybersecurity toolkit for developers that runs 100% in the browser, with no backend. Files, secrets and tokens never leave the user's machine — a security tool that uploads your configs would create the very risk it is meant to prevent. Available in English and Spanish, no sign-up, and it even works offline once loaded.
It audits Dockerfile, docker-compose, nginx, .env, package.json and vercel.json against 77 rules mapped to CWE and OWASP, giving a 0–100 score, line-level findings and ready-to-copy fixes, with SARIF 2.1.0 export for GitHub code scanning. It also includes a secrets scanner with redaction, a JWT inspector with weak-secret detection, an HTTP security headers generator and a password-cracking lab. The site itself ships a strict CSP, HSTS preload and no third-party tracking, and is covered by 67 Vitest tests plus end-to-end checks.
This Portfolio — 3D Scroll Journey
The site you are on right now. Instead of a classic landing page, the visitor scrolls down from above the clouds into a sunlit valley, and each stage of the descent reveals a part of my story — who I am, what I do and where I want to work.
The 3D world is built with Three.js and React Three Fiber: a procedurally generated low-poly landscape with custom noise, volumetric-looking clouds and a scroll-driven camera path, lazy-loaded so the rest of the page stays fast. The sections around it use Framer Motion for reveal animations, and the whole site ships with a strict Content-Security-Policy, Open Graph previews, structured data and a sitemap for SEO.
Let's work together
I'm actively looking for new opportunities. Whether you have a project in mind or just want to say hello — my inbox is always open.
Currently open to full-time and freelance opportunities.