Gerard Guillemas Martos
Freelance Security Engineer at BoxSec
Barcelona, Catalonia, Spain
Summary
🤩
Rockstar🎓
Top SchoolGerard Guillemas Martos is a freelance security engineer with 11 years of hands-on cybersecurity experience, specializing in secure software and infrastructure engineering, automation, and security training. He spent over seven years at Adevinta scaling security through self-serve, automated platforms and leading cross-functional teams and metrics programs for global brands. As the first security hire and Senior Security Engineer at SurrealDB he built product-grade auth features, hardened the server, implemented supply-chain controls, and managed multiple CVEs while contributing Rust code and fuzzing support in OSS-Fuzz. His background in consulting at Deloitte and Ernst & Young complements deep operational skills in incident response, malware analysis, and bespoke security tooling for large enterprises. Based in Barcelona, he blends engineering leadership with practical developer-level coding in Go, Python and Rust, and contributes to cloud security work such as AWS Config rules and CI fuzzing integrations. Less obvious: he pairs security productization with teaching—delivering training and documentation that help engineers adopt security practices without increasing operational burden.
11 years of coding experience
9 years of employment as a software developer
Language Course, English, C2, Language Course, English, C2 at ISI English DublinLanguage Course, English, C2, Language Course, English, C2 at Embassy English San FranciscoBachelor's Degree, Physics, Unfinished, Bachelor's Degree, Physics, Unfinished at Universitat de Barcelona
English, Spanish, Catalan
Github Skills (35)
ec10
boto10
python10
scripting10
aws-config10
web-token10
databases10
user-authentication10
authentication10
security10
script10
amazon-ec210
aws10
database-design10
jsonwebtoken10
Programming languages (13)
Github contributions (5)
surrealdb/surrealdb
Nov 2023 - Jan 2025
A scalable, distributed, collaborative, document-graph database, for the realtime web
Role in this project:
Back-end Developer & Database Engineer
Back-end Developer & Database EngineerContributions:347 reviews, 143 PRs, 464 pushes in 1 year 2 months
Contributions summary:Gerard primarily focused on enhancing the core functionality of the SurrealDB database. Their contributions include updating third-party dependencies, implementing support for authentication levels for basic auth, and addressing issues with JWT parsing and session management. They also improved the codebase by limiting recursion depth in nested RELATE statements, fixing timeout-related overflow problems, and implementing support for remote JSON Web Key Sets, while also focusing on features related to sessions and security.
realtimedatabase-as-a-serviceserverlessnosql-databasedeveloper-tools
awslabs/aws-config-rules
Apr 2016 - Apr 2016
[Node, Python, Java] Repository of sample Custom Rules for AWS Config.
Role in this project:Cloud Engineer / Infrastructure Engineer
Cloud Engineer / Infrastructure EngineerContributions:9 commits, 1 PR, 3 comments in 1 day
Contributions summary:Gerard's commits primarily involve the development and modification of AWS Config rules using Python. Their contributions include creating new rules, improving existing rules, fixing bugs, and updating descriptions. The user demonstrates proficiency in interacting with AWS services like IAM, EC2, and S3, while implementing rule logic and compliance checks. These changes focus on enforcing security best practices and ensuring adherence to AWS resource configurations.
pythoncustom-rulesaws-configconfigrules
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.