Jonathan Conesa
Principal Security Consultant - Proactive Security at NetSPI
United States
Summary
👤
SeniorJonathan Conesa is a Principal Security Consultant with nine years of hands-on experience in offensive security, application and API penetration testing, and vulnerability management across large-scale consumer and enterprise environments. He has led proactive security engagements at NetSPI, driven bug bounty operations and impact analysis at Yahoo, and taught ethical hacking and Python to university students, blending practitioner depth with clear mentorship. Comfortable from Salesforce apps to Web3/DLT, he pairs technical leadership and QA oversight with a track record of building tooling and automations (including shared open-source tools) used by the research community. Notably, he translates complex findings into practical remediation guidance and has a history of scaling vulnerability programs and training teams to reduce repeat exposure.
9 years of coding experience
2 years of employment as a software developer
English, Spanish, python, bash, javascript, java
Github Skills (46)
exploit10
endpoints10
burp9
penetration-testing9
cve9
vulnerabilities8
fuzzing8
active-directory8
threat-intelligence8
jsonwebtoken8
parsedown8
hacking8
security8
url-parsing8
enumeration7
Programming languages (7)
Github contributions (5)
intrudir/BypassFuzzer
Sep 2023 - Jan 2026
Fuzz 401/403/404 pages for bypasses
Contributions:2 PRs, 34 pushes, 8 comments in 2 years 4 months
403-bypass403-forbiddenbugbountyfuzzingpenetration-testing
intrudir/vm-setup.sh
Aug 2022 - Jul 2026
Contributions:56 pushes, 1 branch in 3 years 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.