Josué García
Security Lead at Alvatross
Greater Madrid Metropolitan Area Spain
Summary
🤩
Rockstar🎓
Top SchoolJosué García is a Security Lead and AppSec specialist with 10 years of experience combining hands-on software engineering, offensive security and product security leadership across large telco and security-product environments. He has led Product Security and Application Security programs—integrating SAST/SCA/DAST, threat modeling and security gates into CI/CD—while owning ISO 27001 responsibilities and driving Security Champions to scale practices across engineering teams. His background as an offensive security engineer and contributor to Telefonica’s HomePWN IoT pentesting toolkit signals deep practical expertise in IoT, BLE and custom tooling in Python and Go. He also teaches cybersecurity and secure testing, translating technical controls into pragmatic risk management for digital transformation. Based in the Madrid metro area, he blends practitioner-level exploit knowledge with strategic architecture and governance for cloud, agentic AI orchestration, and product security.
10 years of coding experience
6 years of employment as a software developer
Máster Universitario en Seguridad de Tecnologías de la Información y de las Comunicaciones, Computer and Information Systems Security/Information Assurance, Máster Universitario en Seguridad de Tecnologías de la Información y de las Comunicaciones, Computer and Information Systems Security/Information Assurance at Universidad EuropeaTécnico en Gestión Administrativa, Business Administration, Management and Operations, Técnico en Gestión Administrativa, Business Administration, Management and Operations at I.E.S. Antonio de NebrijaGrado en Ingeniería del Software, Computer Software Engineering, Grado en Ingeniería del Software, Computer Software Engineering at Universidad Rey Juan Carlos
Spanish, English
Github Skills (9)
iot10
btle10
python10
hacking9
networking8
reverse-engineering7
ios6
git5
nfc4
Programming languages (5)
Github contributions (5)
Telefonica/HomePWN
Aug 2019 - Jun 2020
HomePwn - Swiss Army Knife for Pentesting of IoT Devices
Role in this project:
Embedded Systems Engineer / IoT Developer
Embedded Systems Engineer / IoT DeveloperContributions:10 commits, 1 PR, 7 pushes in 10 months
Contributions summary:Josué contributed significantly to the `HomePwn` project, focusing on the analysis and exploitation of IoT devices. Their work included updating the project's banner and descriptions, creating a file to map MAC addresses, and implementing modules. They demonstrated a focus on Bluetooth Low Energy (BLE) by updating apple ble and creating an iPhone ble. This indicates the user has a good understanding of IoT penetration testing tools, BLE, and Python.
iot-devicepentestingiotpythonble
Josue87/AnalyticsRelationships
May 2021 - Mar 2022
Get related domains / subdomains by looking at Google Analytics IDs
Contributions:18 commits, 4 PRs, 16 pushes in 10 months
google-analyticsosintbugbountysubdomains
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.