Luciano Balmaceda
Senior Application Security Engineer
Barcelona, Catalonia, Spain
Summary
🤩
Rockstar🎓
Top SchoolLuciano Balmaceda is a Senior Application Security Engineer with 11 years of experience blending software development and security to build scalable, automated security programs. He has a strong track record integrating SAST/SCA/IaC tooling, creating self-service security review processes that raised adoption by 30%, and building vulnerability management and risk-tracking systems from scratch. A former Auth0 SDK contributor, he’s implemented and improved JWT/OpenID/OAuth flows across popular libraries (including fixes and pagination improvements in widely used auth0 SDKs), and has hands-on experience across backend, frontend and mobile codebases. Luciano pairs threat modeling and pentest-driven remediations with automation (Jira, Tines) to make security operational for engineering teams, and has served as the first AppSec hire to establish company-wide programs. Based in Barcelona, he combines deep implementation skills with a pragmatic focus on developer adoption and measurable security outcomes.
11 years of coding experience
12 years of employment as a software developer
Computer Software Engineering, Computer Software Engineering at Universidad Austral, Buenos AiresEngineer's degree, Computer Software Engineering, Engineer's degree, Computer Software Engineering at UADE
English
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (39)
javascript10
ios10
react-native10
python10
spa-template10
apidoc10
testing10
typescript10
user-authentication10
authentication10
rsa10
java10
android-developer10
javas10
dx10
Programming languages (16)
Github contributions (5)
auth0/java-jwt
Oct 2016 - Sep 2021
Java implementation of JSON Web Token (JWT)
Role in this project:
Back-end Developer
Back-end DeveloperContributions:16 releases, 32 reviews, 221 commits in 4 years 11 months
Contributions summary:Luciano primarily contributed to the Java implementation of JSON Web Tokens (JWT) within the `auth0/java-jwt` repository. They focused on implementing and testing the functionality to parse JWT headers and integrate public and private claims. Furthermore, the user made improvements to the project's internal structure and testing, enhancing its quality through the addition of several tests and addressing existing issues. These efforts demonstrate a focus on the core functionality and reliability of the library.
tokenjson-web-tokendx-sdkweb-tokenjava
auth0/react-native-auth0
Jun 2017 - Sep 2021
React Native toolkit for Auth0 API
Role in this project:Mobile Developer (Android/iOS)
Mobile Developer (Android/iOS)Contributions:10 releases, 27 reviews, 130 commits in 4 years 3 months
Contributions summary:Luciano primarily contributed to the `react-native-auth0` repository by fixing bugs related to the Android web authentication flow. Their work included correcting the intent flags used for launching web authentication in Android and addressing state loss issues. Additionally, they made minor code adjustments and version updates.
apireactreact-nativeauthenticationdx-sdk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.