Carlos Marquez
Senior Consultant - Application Security Penetration Tester
Fontana, California, United States
Summary
👤
Senior🎓
Top SchoolCarlos Marquez is a Senior Consultant and Application Security Penetration Tester with seven years of hands-on experience hardening web applications, containers, and cloud solutions. Based in Fontana, CA, he blends deep offensive testing skills—SSO/SAML assessment, API and web app pentesting, protocol fuzzing, and DoS resilience testing—with practical automation via Python (including tooling to parse NVD/CVSS data). At Coalfire and previously Avaya he’s partnered with developers to implement defense-in-depth for microservices and CI environments, advising on AppArmor, seccomp, cgroups, RBAC and tailored network policies. Comfortable across diverse stacks and databases, he brings systems-level insight from network routing to SIP/VoIP platforms, and a knack for turning vulnerability findings into actionable advisories. An infosec aficionado who started as a mechanical engineering intern, he combines curiosity and engineering discipline to drive secure, production-ready solutions.
7 years of coding experience
7 years of employment as a software developer
Cal Poly Pomona
Spanish, English, Japanese
Github Skills (38)
django10
vulnerability9
devsecops9
vulnerability-management9
analytics9
python9
security9
security-automation9
owasp9
automation9
kubernetes8
devops7
bare-metal7
kubernetes-cluster7
aws7
Programming languages (7)
Github contributions (5)
gnarly-cl0s/AZ-500CheatSheet
Aug 2020 - Nov 2020
Contributions:27 commits, 33 pushes, 1 branch in 2 months
gnarly-cl0s/How-To-Secure-A-Linux-Server
Sep 2021 - Jan 2025
An evolving how-to guide for securing a Linux server.
Contributions:2 pushes in 3 years 4 months
how-to-guidelinux-serversecuritylinuxluks
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.