Latest Space News
Sun, 23 Sep 2018 15:10:09 +0000
With Congress set to approve a Federal Aviation Administration bill with some commercial space provisions, those in the industry are hoping for action on other bills before the end of this year. SpaceNews.com
Fri, 21 Sep 2018 10:37:57 +0000
NASA is planning two alternative reviews of an airborne observatory amid conflicting congressional views on whether the program will be eligible for the next senior review of astrophysics missions. SpaceNews.com
Thu, 20 Sep 2018 23:58:10 +0000
One thing a highball estimate does accomplish is “shift the debate to how expensive this is going to be." SpaceNews.com
Thu, 20 Sep 2018 22:06:46 +0000
NOAA awarded more than $8 million in contracts this week to three companies in the second round of a commercial satellite weather data pilot program. SpaceNews.com
Thu, 20 Sep 2018 21:00:48 +0000
European launch provider Arianespace signed a contract with the Korean Aerospace Research Institute for a Vega C mission Sept. 20, growing the rocket’s backlog to five as its debut launch nears. SpaceNews.com
Thu, 20 Sep 2018 18:19:43 +0000
Whoever signs up for one of two certification flights for the Omega rocket, will get a ride “at a reduced rate." SpaceNews.com
Thu, 20 Sep 2018 01:45:58 +0000
"It doesn't necessarily mean buying a company. It could be buying a product line. It could be buying a portion of a business that fits with us. We want to make sure that it's strategic." SpaceNews.com
Wed, 19 Sep 2018 23:51:28 +0000
Bezos: At a time of increasing global competition, “You have to be able to go to space more frequently, with less lead time." SpaceNews.com
Wed, 19 Sep 2018 23:32:28 +0000
Kleos Space, a company developing a constellation of satellites for radiofrequency geolocation work, will launch its first satellites in 2019 with Rocket Lab under a deal announced Sept. 19. SpaceNews.com
Wed, 19 Sep 2018 20:27:57 +0000
A Georgia county seeking to develop a spaceport has attracted a small launch vehicle company to set up operations and, hopefully, launch from there. SpaceNews.com
Wed, 19 Sep 2018 19:28:56 +0000
Shanahan on space reorganization: “We’re going to find the best way. There will be some hammering and arm wrestling. " SpaceNews.com
Wed, 19 Sep 2018 15:12:29 +0000
Gen. Jay Raymond: “There’s an explosion of things happening in the commercial industry. We want to capitalize on that." SpaceNews.com
Wed, 19 Sep 2018 08:17:39 +0000
Boeing and SpaceX, who have been struggling to meet safety thresholds established by NASA for commercial crew vehicles, now believe their vehicles can meet those requirements as they prepare for test flights scheduled in the next several months. SpaceNews.com
Wed, 19 Sep 2018 03:39:09 +0000
Orbital Insight, a Silicon Valley geospatial analytics company, announced the purchase Sept. 18 of FeatureX, a Boston-based artificial intelligence firm specializing in computer vision for satellite imagery. The terms of the purchase were not disclosed. SpaceNews.com
Wed, 19 Sep 2018 01:11:48 +0000
Wilson suggested her proposal is only the opening salvo. “I expect there will be a lot of discussion about how to implement the president’s vision.” SpaceNews.com
Tue, 18 Sep 2018 18:14:02 +0000
Melanie Stricklan, Slingshot Aerospace: “We see a big need for SSA solutions, not just in the military but also in academia and in satellite owners and operators." SpaceNews.com
Tue, 18 Sep 2018 18:01:02 +0000
Air Force Secretary Heather Wilson’s Space Force proposal dropped on the first day of the Air Force Association’s Air Space Cyber symposium, and it took the community by storm. SpaceNews.com
Tue, 18 Sep 2018 18:00:33 +0000
The Air Force’s advocacy group, the Air Force Association, is taking off the gloves and pointedly voicing opposition to separating space out of the Air Force. SpaceNews.com
Tue, 18 Sep 2018 17:12:29 +0000
Three months after its inaugural meeting, the advisory group supporting the National Space Council is working to organize itself and identify topics for study while preparing for its next full meeting. SpaceNews.com
Tue, 18 Sep 2018 07:40:17 +0000
AFA: "Standing up a separate space bureaucracy amplifies the problem by driving more money to a headquarters function, not space operations. " SpaceNews.com
More space news...
18814 cvs - 817 jobs

LOOKING FOR A JOB?

  • HOME
  • POST YOUR CV
  • JOB SEARCH
  • LOOKING FOR STAFF?

  • HOME
  • REGISTER
  • CV SEARCH
  • POST JOBS
  • CV: Senior Security Auditor and Software System Engineer

    Printer Friendly


    << BACK

    Personal information
     Name:<withheld>
     Age:<withheld>
     Country:<withheld>
     Location:<withheld>
    Contact information
     Email:<withheld>
     Phone:<withheld>
     Mobile:<withheld>
    Candidate Profile
     Date Submitted:12-04-2016
     Last Modified:13-10-2016 (10:06)
    Job information
     Current job:Senior Security Auditor and Software System Engineer
     Employment Term:Either
     Job location:Own country
     Date available:within a month
     Industry:Civil Agencies/International Organizations, Satellite Operators, , , Consulting/Engineering Services
     KeywordsSecurity Auditor. Pentesting with Kali, Nmap, BurpSuite, Nessus, Metasploit, Scripting. Code and Web Audits. HP-WebInspect, HP-Fortify (Static Code Analyzer). Secure Systems Configuration audits (CCN-STIC guides). Full preparation and maintenance of vi
    CV

    EDUCATION
    -    Bachelor of Computer Science at the Universidad Politécnica de Madrid (5years+project) - 2006

    -    Master of Big Data and Data Analysis - from October 2016 to April 2017
    -    Master of Project Science at Tampere University of Technology (Finland) - 2007
    -    Master of Management in Information Technology (Universidad Europea de Madrid in collaboration with Indra S.A.) - 2008
    -    Master J2EE and J2SE Advanced Developer– 2011
    -    Lecturer at Master in Ciberdefense - Big Data in Open-source
    intelligence (OSINT) and Social Engineering - Universidad de Alcalá de Henares - 2016

    MAIN SKILLS

    o    Static Code Analysis. Secure Software Architecture & Design.

    o    Pentesting with Kali, Nmap, BurpSuite, Nessus, Metasploit, Scripting.
    o    Big Data for OSINT. Logstash, ElasticSearch, Kibana and MongoDB.
    o    Python and Powershell for Penetration Testing
    o    Secure Systems Configuration and Web Audits (CCN-STIC guides). Linux and Windows Servers.
    o    Full preparation and maintenance of virtual machines environments for pentesting.
    o    Agile development. Maven and TDD. Jenkins and Sonar.
    o    Virtual machines and cloud computing solutions.
    o    J2EE Web Solutions: Spring, JSF 2, JMS, JPA, Web Services, JQuery.


    WORK EXPERIENCE
    - Dates: From March 2015
    - Company: Isdefe – Cybersecurity and Cyberdefense.
    - Role: Security Auditor & Software System Engineer.
    - Main activities:
    •   Python and Powershell scripts for Penetration Testing.
    •   Static Code and Web Vulnerabilities Audits. HP-WebInspect, HP-Fortify (Static Code Analyzer)
    •   Architecture for static and dynamic audits of new developments.
    •   Big Data for OSINT. Logstash, ElasticSearch, Kibana and MongoDB.
    •   Pentesting. Kali, Nmap, Nessus, Metasploit
    •   Military computer network audits. Communication systems, Hospitals networks, classify systems.
    •   Data Minning to classify, prioritize and solve vulnerabilities.
    •   Secure Systems Configuration audits (CCN-STIC guides). Linux and Windows Servers.
    •   Full preparation and maintenance of virtual machines environment for pentesting.
    •   WiFi Audits. Nethunter, WifiSlax, NetworkMiner, Wireshark, Mana.
    •   Provider selection for a centralized vulnerabilities system analyzer.
    •   Social Engineering - SET (Social Engineer Toolkit). Maltego. Whonix

    - Dates: From April 2014 to June 2014
    - Company: Isdefe - Cybersecurity and Cyberdefense. La Marañosa Technological Institute in collaboration with Universidad de Alcalá de Henares.
    - Role: Security Auditor & Software System Engineer.
    - Main activities:
    •    Environment Data Analysis. Development of a Honeynet.
    •    Implementation methodology for Agile Java environments (Subversion, Jenkins, Sonar, HP Static Code Analyzer, HP-WebInspect, HP Software Security Center).
    •    NoSQL Databases - MongoDB.
    -    Dates: From April 2013 to February 2015
    -    Company: Isdefe - Cibersecurity and Ciberdefense
    -    Role: Security Auditor & Software System Engineer.
    -    Main activities:
    •    Implantation tasks, development, configuration, control and maintenance of virtual scenarios using Citrix XenServer to perform security audit tasks of Systems used in the Defense Ministry.
    •    Code and Web Vulnerabilities Analysis. HP Fortify and HP Web Inspect.
    •    Intrusion tests (Kali), Vulnerability Security Detection (Nessus), Forensic Analysis and Fuzzing Test.
    •    Secure Systems Configurations (CCN-STIC guides).
    •    Deep web. TOR network – Whonix Gateway.

    - Dates: From April 2013 to March 2014
    - Company: Isdefe – Airport Security Project XPDITE - co-funded by the Seventh Framework Programme of the European Commission.
    - Role: Security Auditor & Software System Engineer
    - Main activities:
    •    Develop, demonstrate and validate a comprehensive, passenger-centred, outcome-focused, system-level approach to the design and evaluation of airport security checkpoints. This will allow airports, checkpoint designers and regulators to incorporate a wide range of requirements and to evaluate checkpoint performance against system-level security, cost, throughput, passenger satisfaction and ethical factors. The result will be robust and controllable security performance, whilst providing freedom for airport operators to design checkpoints with innovative technologies and procedures.
    •    Sweet Home 3D modification for the checkpoint design level.

    - Dates: From January 2012 to March 2013
    - Company: I.N.S.A. Aerospace Engineer Services. Project MUS (Master User Services) within PAZ Ground Segment project.
    - Role: Software System Engineer
    - Main activities:
    •    System that provides services to Civil and Defense users from the PAZ satellite.
    •    Continuous integration. TDD. Maven, Jenkins, Sonar and JUnit. Analysis and deployment solutions.
    •    Web services with apache CXF. JAXB. XPath.
    •    Liferay Portlets development. JSF and Spring MVC with Ajax.
    •    Reporting. Jasper (DynamicJasper), iReports with aspect programming.
    •    JMS solutions for the communication and updates between web modules.
    •    Openlayers API. Free map for the web
    •    LDAP, REST, Spring-ROO

    - Dates: From January 2010 to December 2011
    - Company: I.N.S.A. Aerospace Engineer Services for the La Marañosa Technological Institute for the Spanish Defense Ministry.
    - Role: Software System Engineer
    - Main activities:
    •    Development and Implantation of the intranet web portal for La Marañosa Technological Institute.
    •    Media Server video streaming + Adobe Flex with Red5 for a chat and videoconference project.
    •    Integrating Adobe Flex, AS3 and Java using Spring and Spacefactory framework.
    •    Java Swing application to record videos, sound and images. Technologies: Java Swing, Spring Core, Spring JMS, Apache POI.
    •    Business Process Development (JBPM) with DROOLS tools.
    •    Open ldap and Java Swing application for users login.
    •    Software process and Incremental design with SCRUM methodology.
    •    Virtualization and creation of platforms for development, tests and production environments. Platforms: VMware vCenter Server and Hyper-V.
    •    Scripts for the automation of Virtual Machines over Microsoft Hyper-V Server 2008.
    •    Analysis, Administration, Implantation, deployment and maintenance of the web portal for the knowledge management with open source tools including a Centralized User Access Control (LDAP), Content Management, Document Management, Project Management, video conferencing and version control systems. Technologies: Liferay, Alfresco, BigBlueButton, Redmine, Moodle and Subversion.

    - Dates: From January 2008 to December 2009
    - Company: Indra. Project for the Spanish Defense Ministry. Command and Control Unit.
    - Role: Software System Engineer
    - Main activities:
    •    Integration engine for the interoperability of data models. The result is a bidirectional means of communication that allows the interoperability between systems.
    •    Technologies – Java Swing, Hibernate, JPA, Apache Log4j, Apache POI, Dom4j, Apache Ant, Castor JDO, Jakarta Regexp, Javacc, Javahelp.
    •    Scriptable Install System – NSIS (Nullsoft Scriptable Install System), Launch4J.
    •    Altova XmlSpy- Management of schemas (xsd), xml and queries (XPath, XQuery).
    •    Data Bases – Oracle, MySQL, Postgres. Model Data Design (Erwin). Procedures/functions PLSQL y Triggers. Data Base Administration. (TOAD, SQLYog, pgAdmin).
    •    Shell Scripts - Automation of tasks (backup and installations) for a Ubuntu Server.
    •    Web Services.
    •    Version Control System - Source code and document management (subversion).
    •    Virtual Environments – virtualization of systems for test environments.

    - Dates: From June 2007 to December 2007
    - Company: Soluziona.
    - Role: Software Engineer
    - Main activities:
    •    Development and maintenance of a system for the risk management for the mobile phone company Orange. Programming with Java, C++, C, ORACLE administration with TOAD. Unix system.

    - Dates: From October 2006 to June 2007
    - Company: Tampere University of Technology - ENTHRONE Project.
    - Role: Software Engineer Junior
    - Main activities:
    •    Interconnection between a XML-Server and a Web application using Java servlets. The application handles and manipulates XML databases and multimedia contents using Tamino API and XQueries. Design of XML schemas and stylesheets, XML databases configuration, security access, backup and restore.

    - Dates: From October 2004 to June 2005
    - Company: Universidad Politécnica de Madrid (Systems Department).
    - Role: Software Engineer Junior
    - Main activities:
    •    Development of localization Software with Matlab (application for a robot).

    CERTIFICATIONS
    -    CEH v8 – Certified Ethical Hacking (EC-Council) - 2016
    -    ITIL v2– Foundation Certificate in IT Service Management - 2008

    COURSES

    -    Professional course of Python and Django. (AEPI) October 2016. 40h
    -    Expert in Python Programming. (CICE) September 2016. 30h
    -    Computer Forensics. July 2016. 25h
    -    Malware Analysis. June 2016. 25h
    -    Forensic analysis of mobile devices. June 2016. 10h
    -    Big Data for OSINT. April 2016. 60h
    -    Burp Suite tool. April 2016. 15h
    -    Nessus tool. March 2016. 15h
    -    MS PowerShell Scripting Advanced. December 2015. 16h
    -    Server Virtualization with Hyper-V. November 2015. 25h
    -    NATO Architecture Framework. October 2015. 6h
    -    Data Mining Fundamentals. June 2015. 16h
    -    HP Fortify, Web Inspect (SCA, SCC). Febrero 2015
    -    VMWare. Data Center Virtualization. December 2014. 40h
    -    MS PowerShell Scripting. October 2014. 16h
    -    Metasploit. Cidites. December 2013. 40h
    -    Forensic Analysis. Cidites. September 2013. 40h
    -    Github Immersion. December 2012. 10h
    -    HTML5 and CSS3. Imagina Formación. November 2012. 25h
    -    Oracle SQL expert. CEIM. March 2012. 25h
    -    Portlets developing. Atrium group. September 2011. 16h
    -    Actionscripts 3.0 Programming (Flash-Flex) - CEIM 30h
    -    Web Development with STRUTS 1.X. Eikasten_plus. 2010-2011.
    -    Web Applications with Ajax and JSP. Eikasten_plus. 2010-2011.
    -    JSP Programming. Eikasten_plus. 2010-2011.
    -    Microsoft Excel 2007 Advanced. Eikasten_plus. 2009-2010.
    -    Web Components development with Java Technology – Sun Microsystems. 2008. 32h
    -    Web Services Development – Sun Microsystems. 2008. 28h
    -    Client Service. PSICOSOFT. 2007. 20h

    SPECIFIC KNOWLEDGE
    -    Management Area
    o    Request for Proposal generation and provider selection.
    o    ITIL, CMMi, PMI, ISO2000 concepts.
    -    Management KnowledgePlatforms:
    o    Contents Management: Liferay
    o    Documents Management: Alfresco
    o    E-learning Management: Moodle
    o    Web Conferencing: BigBlueButton
    o    Users Management: Open LDAP
    -    Programming Languages and methodologies:
    o    Object-Oriented Programming: Java
    o    RIA (Rich Internet Application): Flex, AS3
    o    Structured Programming: C and Ada
    o    Functional Programming: Haskell
    o    Logic Programming: Prolog
    o    Embedded Systems: vhdl
    o    Interpreted languages: Python, Matlab, Maple, scripting
    -    Servers and cloud servers
    o    CentOS, Ubuntu Server, Windows Server
    o    Amazon Elastic Compute Cloud (Amazon EC2)
    -    Data Bases:
    o    Oracle, MySQL, PostgreSQL, Hsqldb, FireBird. Procedures, functions and triggers.
    o    Tamino XML-Server. XMLS schemas design and XQuery.
    o    CASE tool: Erwin and Data Architect.
    o    Data Base Administration: TOAD, SQLyog.
    o    Deductive Data Bases: WEKA.
    -    Software Engineering
    o    Specification and requirements analysis.
    o    Analysis. (Enterprise Architect tool). Use cases. Documentation and requirements.
    o    Design. Activity diagrams, classes and sequence.
    o    Procedures and test reports.
    -    Computing Tools
    o    Tamino Server-XML.
    o    Altova XML Spy (XML Scheme Design).
    o    Altova Style Vision (Style Sheet Design).
    o    Microsoft Office Visio. Flow diagrams, user interface design.
    o    Hardware language description. Vhdl, Tedmos.
    -    Office Software:
    o    Visio, Access, Excel Macros.

    LANGUAGES
    -    Advanced Level in English. Continued to attend English classes on regular weekly since October 2008 to build upon the level I achieved while studying my Erasmus course in Finland.
    -    Course 06/07 in TUT University (Finland). Full documentation of the Master Thesis Project in English.

    GROUPS – INTERESTS
    -    MadridJS, HTML5 Spain, Agile Spain

    INFORMATION OF INTEREST
    -    Publication of the report “Development of a Metadata Repository for a Digital Film Production Metadata based on the Material eXchange Format (MXF)” for the Institute of Signal Processing, Department of Information Technology, Tampere University of Technology, Finland, http://www.cs.tut.fi/sgn/namu/.
    -    Postgraduate Certificate in Education (PGCE). Universidad Complutense de Madrid.08/09.

     

    MASTER BIG DATA Y ANALISIS DE DATOS
    -    Data Models NoSQL with MongoDB - management, queries and information retrieval.
    -    Setting up a Hadoop system - ecosystem of tools and data processing.
    -    Programming and use of Python libraries for data analysis.
    -    Data Warehouse - obtaining relationships between data and makes decisions.
    -    Machine learning algorithms - used for data analysis.
    -    Lifecycle data analysis process - actors and coordination of the different tools.
    -    Export and import data and manage them in MongoDB, Hadoop and Python.


    MASTER J2EE DEVELOPER
    -    Agile Methodologies: Scrum, TDD
    -    Spring 3.0, Liferay Portlets, Spring MVC, Hibernate and Ibatis
    -    Java Server Faces, Struts1, Struts 2 and Liferay
    -    jQuery, prototype, script.aculo.us.
    -    RMI, JMS, Web services.

    MASTER J2SE DEVELOPER
    -    Developing JavaSE Applications.
    -    Birt. Business Intelligence and Reporting Tools
    -    Design Patterns
    -    Frameworks for developing JavaEE: Struts 1.x y 2.x, Spring (SpringCore, MVC, Webflow), JSF (Myfaces)
    -    Web portals solutions (Portlets, Liferay Portals and JSF (Myfaces))

    MASTER IN MANAGEMENT OF INFORMATION TECHNOLOGY
    Provides the necessary tools and knowledge for carrying out a successful management during the whole cycle life of an IT service.
    •    Project Title: Management Plan for a user attention service, Microcomputer and Development and Maintenance of SYCO program for the Aircompact Enterprise.
    •    Brief description: Service Management Plan related to the development and maintenance, Voice and Data Infraestructure, Microtechnology and Technology Consultancy of ISMIDE S.A. Collecting the Management Planning of Service Management with the intention of facilitating its development, monitoring and control.


    Registering is the only way of posting vacancies and obtaining contact details of candidates in our CV database.

    All it takes is a few minutes and a credit card (Visa or American Express). To sign-up to this service, simply click on the Register link and fill in the form. You will then have instant access to our system after on-line payment where you will be able to complete the transaction in either US Dollars, UK Pounds or Euros.

    All online credit/debit card transitions are handled through our secure third party payment processors at WorldPay. Worldpay are part of The Royal Bank of Scotland Group, the 5th biggest banking group in the world, WorldPay payment solutions are trusted by thousands of businesses, big and small worldwide. 

    Pricing starts at €450 (approx £400 or US$500 - use the convert tool for an exact conversion) for one month unlimited job postings and unlimited CV database access (for one user), with package discounts available if you have more permanent recruiting needs. For example, a Gold subscription will give you unlimited jobs posting and unlimited CV database access for one year at just over €250 per month!

     

    2018 Pricing Structure (excluding VAT):

    1 month - Discovery 450 euros convert
    3 months - Bronze 1150 euros convert
    6 months - Silver 1950 euros convert
    12 months - Gold 3200 euros convert

     

    If online payment is not convenient, give us a call at +33(0)622757477 or send us an email at sales@space-careers.com. We will set up an account for you and invoice you. Note that you can also pay through PayPal.

    Please note that the posting of academic positions is free of charge. All you need to do is email us your job description and we will post it for you.

     

    VAT:

    Spacelinks is based in France so the following European Union regulations regarding electronic commerce apply:
    - if your business is located outside the EU, VAT does not apply to you
    - if your business is located in France, you will be charged a 20% VAT
    - if your business is located in the EU and you don't have a valid VAT registration number, you will be charged a 20% VAT
    - if your business is located in the EU and you do have a valid VAT registration number, you won't be charged VAT provided you give us your VAT number (mandatory for invoicing)

     

    Support:

    For sales enquiries and general information, you can call us on +33(0)622757477.
    Support is available Mon-Fri on +33(0)622757477 or via email. Out-of-hours support is provided only via email.

    Please also note that we are located in France. Our normal office hours are 09:00 to 18:00 Monday to Friday. France timezone is GMT+1.

     

    Warning:

    We are very serious about our job seekers privacy so only legitimate recruiters and employers are eligible for a recruiter account. All subscriptions requests will be manually approved and recruiter accounts constantly monitored. Users who enter inaccurate or incomplete information will not gain access to post jobs or search resumes. Sharing of login details with a third party will result in the suspension of the recruiter's account with no subscription refund.
    Recruitment agencies are only eligible for a Gold package and recruitment agencies recruiting for companies already using Space Careers will not be accepted.

    To ensure you are approved, please include the following on your application:
    * The website address of your Company. Under construction websites will be rejected.
    * Email - Must end in @yourcompany.com. Applications using free email accounts such as Hotmail, Yahoo or Gmail will be rejected.

    Individual exceptions can be made on a case by case basis by emailing sales@space-careers.com. Accounts found not to be in compliance will be deleted.

     
    Terms & ConditionsCopyright ©2018 Spacelinks
    Web Analytics