Latest Space News
Tue, 18 Dec 2018 17:19:55 +0000
Legislation reforming the national security space enterprise received broad bipartisan support in the House last year, so it will be interested to see how Democrats treat the issue. Is their support for these reforms predicated on whether or not they’re endorsed by President Trump? SpaceNews.com
Tue, 18 Dec 2018 13:30:04 +0000
Earth observation company Planet plans to acquire Boundless Spatial Inc., a geospatial software specialist “to accelerate the adoption by government and enterprise customers of commercial geospatial information services,” said Robbie Schingler, Planet co-founder and chief strategy officer. SpaceNews.com
Tue, 18 Dec 2018 11:52:46 +0000
A privately funded Israeli lunar lander originally built for a prize competition is now complete and ready for launch in early 2019. SpaceNews.com
Tue, 18 Dec 2018 00:04:06 +0000
Lord said Virgin Orbit is "an example of the type of companies I think we need to cultivate.” SpaceNews.com
Mon, 17 Dec 2018 22:48:12 +0000
When the world watched Neil Armstrong take that one small step onto the lunar surface almost 50 years ago, no one could have dreamed how space would one day become an integral part of daily life on earth. SpaceNews.com
Mon, 17 Dec 2018 18:38:20 +0000
Blue Origin plans to conduct the next test flight of its New Shepard suborbital vehicle Dec. 18 as the company moves closer to flying people into space. SpaceNews.com
Mon, 17 Dec 2018 15:50:25 +0000
Swedish startup Ovzon, which in October bought a Falcon Heavy launch from SpaceX, has now purchased a satellite for that mission from Maxar Technologies’ Space Systems Loral division. SpaceNews.com
Mon, 17 Dec 2018 10:47:05 +0000
As the Commerce Department works on plans to take over civilian space traffic management responsibilities, the U.S. Air Force is making more data available on the positions of military satellites. SpaceNews.com
Sun, 16 Dec 2018 12:10:40 +0000
The Air Force has not determined when it might allow reused hardware instead of brand-new Falcon 9 Block 5 rockets. SpaceNews.com
Sun, 16 Dec 2018 10:21:38 +0000
A Rocket Lab Electron rocket successfully launched a group of cubesats Dec. 16 on a mission funded by NASA as the company looks ahead to more frequent launches in the next year. SpaceNews.com
Fri, 14 Dec 2018 18:18:58 +0000
The NASA Advisory Council has recommended that NASA review its existing planetary protection guidelines to balance the needs of science and exploration, an effort that could set the stage for a similar revision at the international level. SpaceNews.com
Fri, 14 Dec 2018 15:24:23 +0000
While some question whether Virgin Galactic’s latest SpaceShipTwo test flight actually went into space, a number of government officials and industry organizations have few doubts that it did. SpaceNews.com
Fri, 14 Dec 2018 12:30:05 +0000
Business Finland, a Finnish trade and economic development agency, awarded a 10 million Euro ($11.36 million) grant to radar satellite operator ICEYE. SpaceNews.com
Fri, 14 Dec 2018 00:55:51 +0000
With a first flight to the edge of space under the company’s belt, Virgin Galactic founder Richard Branson believes commercial flights of SpaceShipTwo could begin some time next year. SpaceNews.com
Thu, 13 Dec 2018 23:49:54 +0000
A DARPA team will “inventory the DoD space-based command-and-control capabilities, identify critical gaps, deficiencies and inefficiencies in our existing architectures." SpaceNews.com
Thu, 13 Dec 2018 21:16:47 +0000
Greg Wyler, OneWeb’s founder, said the company will need only 600 satellites or so instead of 900 after ground tests of the first satellites demonstrated better than expected performance. SpaceNews.com
Thu, 13 Dec 2018 20:17:16 +0000
The first GPS 3, known as SV01, is the first of an entirely new design of GPS satellite that has three times better accuracy and up to eight times improved anti-jamming capabilities, according to Lockheed Martin. SpaceNews.com
Thu, 13 Dec 2018 19:48:38 +0000
The U.S. Air Force’s first GPS 3 satellite was encapsulated within a SpaceX payload fairing at Astrotech Space Operations on Dec. 7 in preparation for a Dec. 18 launch at Cape Canaveral Air Force Station, Florida. SpaceNews.com
Thu, 13 Dec 2018 18:23:46 +0000
Once lawmakers have a chance to review the proposal, said Shanahan, he will be “happy to take the red pen out." SpaceNews.com
Thu, 13 Dec 2018 17:12:57 +0000
Virgin Galactic achieved a long-awaited milestone Dec. 13 when its SpaceShipTwo suborbital vehicle performed its longest test flight to date, exceeding one altitude often used as the boundary of space. SpaceNews.com
More space news...
18979 cvs - 874 jobs

LOOKING FOR A JOB?

  • HOME
  • POST YOUR CV
  • JOB SEARCH
  • LOOKING FOR STAFF?

  • HOME
  • REGISTER
  • CV SEARCH
  • POST JOBS
  • CV: Senior Security Auditor and Software System Engineer

    Printer Friendly

     


    << BACK

    Personal information
     Name:<withheld>
     Age:<withheld>
     Country:<withheld>
     Location:<withheld>
    Contact information
     Email:<withheld>
     Phone:<withheld>
     Mobile:<withheld>
    Candidate Profile
     Date Submitted:12-04-2016
     Last Modified:13-10-2016 (10:06)
    Job information
     Current job:Senior Security Auditor and Software System Engineer
     Employment Term:Either
     Job location:Own country
     Date available:within a month
     Industry:Civil Agencies/International Organizations, Satellite Operators, , , Consulting/Engineering Services
     KeywordsSecurity Auditor. Pentesting with Kali, Nmap, BurpSuite, Nessus, Metasploit, Scripting. Code and Web Audits. HP-WebInspect, HP-Fortify (Static Code Analyzer). Secure Systems Configuration audits (CCN-STIC guides). Full preparation and maintenance of vi
    CV

    EDUCATION
    -    Bachelor of Computer Science at the Universidad Politécnica de Madrid (5years+project) - 2006

    -    Master of Big Data and Data Analysis - from October 2016 to April 2017
    -    Master of Project Science at Tampere University of Technology (Finland) - 2007
    -    Master of Management in Information Technology (Universidad Europea de Madrid in collaboration with Indra S.A.) - 2008
    -    Master J2EE and J2SE Advanced Developer– 2011
    -    Lecturer at Master in Ciberdefense - Big Data in Open-source
    intelligence (OSINT) and Social Engineering - Universidad de Alcalá de Henares - 2016

    MAIN SKILLS

    o    Static Code Analysis. Secure Software Architecture & Design.

    o    Pentesting with Kali, Nmap, BurpSuite, Nessus, Metasploit, Scripting.
    o    Big Data for OSINT. Logstash, ElasticSearch, Kibana and MongoDB.
    o    Python and Powershell for Penetration Testing
    o    Secure Systems Configuration and Web Audits (CCN-STIC guides). Linux and Windows Servers.
    o    Full preparation and maintenance of virtual machines environments for pentesting.
    o    Agile development. Maven and TDD. Jenkins and Sonar.
    o    Virtual machines and cloud computing solutions.
    o    J2EE Web Solutions: Spring, JSF 2, JMS, JPA, Web Services, JQuery.


    WORK EXPERIENCE
    - Dates: From March 2015
    - Company: Isdefe – Cybersecurity and Cyberdefense.
    - Role: Security Auditor & Software System Engineer.
    - Main activities:
    •   Python and Powershell scripts for Penetration Testing.
    •   Static Code and Web Vulnerabilities Audits. HP-WebInspect, HP-Fortify (Static Code Analyzer)
    •   Architecture for static and dynamic audits of new developments.
    •   Big Data for OSINT. Logstash, ElasticSearch, Kibana and MongoDB.
    •   Pentesting. Kali, Nmap, Nessus, Metasploit
    •   Military computer network audits. Communication systems, Hospitals networks, classify systems.
    •   Data Minning to classify, prioritize and solve vulnerabilities.
    •   Secure Systems Configuration audits (CCN-STIC guides). Linux and Windows Servers.
    •   Full preparation and maintenance of virtual machines environment for pentesting.
    •   WiFi Audits. Nethunter, WifiSlax, NetworkMiner, Wireshark, Mana.
    •   Provider selection for a centralized vulnerabilities system analyzer.
    •   Social Engineering - SET (Social Engineer Toolkit). Maltego. Whonix

    - Dates: From April 2014 to June 2014
    - Company: Isdefe - Cybersecurity and Cyberdefense. La Marañosa Technological Institute in collaboration with Universidad de Alcalá de Henares.
    - Role: Security Auditor & Software System Engineer.
    - Main activities:
    •    Environment Data Analysis. Development of a Honeynet.
    •    Implementation methodology for Agile Java environments (Subversion, Jenkins, Sonar, HP Static Code Analyzer, HP-WebInspect, HP Software Security Center).
    •    NoSQL Databases - MongoDB.
    -    Dates: From April 2013 to February 2015
    -    Company: Isdefe - Cibersecurity and Ciberdefense
    -    Role: Security Auditor & Software System Engineer.
    -    Main activities:
    •    Implantation tasks, development, configuration, control and maintenance of virtual scenarios using Citrix XenServer to perform security audit tasks of Systems used in the Defense Ministry.
    •    Code and Web Vulnerabilities Analysis. HP Fortify and HP Web Inspect.
    •    Intrusion tests (Kali), Vulnerability Security Detection (Nessus), Forensic Analysis and Fuzzing Test.
    •    Secure Systems Configurations (CCN-STIC guides).
    •    Deep web. TOR network – Whonix Gateway.

    - Dates: From April 2013 to March 2014
    - Company: Isdefe – Airport Security Project XPDITE - co-funded by the Seventh Framework Programme of the European Commission.
    - Role: Security Auditor & Software System Engineer
    - Main activities:
    •    Develop, demonstrate and validate a comprehensive, passenger-centred, outcome-focused, system-level approach to the design and evaluation of airport security checkpoints. This will allow airports, checkpoint designers and regulators to incorporate a wide range of requirements and to evaluate checkpoint performance against system-level security, cost, throughput, passenger satisfaction and ethical factors. The result will be robust and controllable security performance, whilst providing freedom for airport operators to design checkpoints with innovative technologies and procedures.
    •    Sweet Home 3D modification for the checkpoint design level.

    - Dates: From January 2012 to March 2013
    - Company: I.N.S.A. Aerospace Engineer Services. Project MUS (Master User Services) within PAZ Ground Segment project.
    - Role: Software System Engineer
    - Main activities:
    •    System that provides services to Civil and Defense users from the PAZ satellite.
    •    Continuous integration. TDD. Maven, Jenkins, Sonar and JUnit. Analysis and deployment solutions.
    •    Web services with apache CXF. JAXB. XPath.
    •    Liferay Portlets development. JSF and Spring MVC with Ajax.
    •    Reporting. Jasper (DynamicJasper), iReports with aspect programming.
    •    JMS solutions for the communication and updates between web modules.
    •    Openlayers API. Free map for the web
    •    LDAP, REST, Spring-ROO

    - Dates: From January 2010 to December 2011
    - Company: I.N.S.A. Aerospace Engineer Services for the La Marañosa Technological Institute for the Spanish Defense Ministry.
    - Role: Software System Engineer
    - Main activities:
    •    Development and Implantation of the intranet web portal for La Marañosa Technological Institute.
    •    Media Server video streaming + Adobe Flex with Red5 for a chat and videoconference project.
    •    Integrating Adobe Flex, AS3 and Java using Spring and Spacefactory framework.
    •    Java Swing application to record videos, sound and images. Technologies: Java Swing, Spring Core, Spring JMS, Apache POI.
    •    Business Process Development (JBPM) with DROOLS tools.
    •    Open ldap and Java Swing application for users login.
    •    Software process and Incremental design with SCRUM methodology.
    •    Virtualization and creation of platforms for development, tests and production environments. Platforms: VMware vCenter Server and Hyper-V.
    •    Scripts for the automation of Virtual Machines over Microsoft Hyper-V Server 2008.
    •    Analysis, Administration, Implantation, deployment and maintenance of the web portal for the knowledge management with open source tools including a Centralized User Access Control (LDAP), Content Management, Document Management, Project Management, video conferencing and version control systems. Technologies: Liferay, Alfresco, BigBlueButton, Redmine, Moodle and Subversion.

    - Dates: From January 2008 to December 2009
    - Company: Indra. Project for the Spanish Defense Ministry. Command and Control Unit.
    - Role: Software System Engineer
    - Main activities:
    •    Integration engine for the interoperability of data models. The result is a bidirectional means of communication that allows the interoperability between systems.
    •    Technologies – Java Swing, Hibernate, JPA, Apache Log4j, Apache POI, Dom4j, Apache Ant, Castor JDO, Jakarta Regexp, Javacc, Javahelp.
    •    Scriptable Install System – NSIS (Nullsoft Scriptable Install System), Launch4J.
    •    Altova XmlSpy- Management of schemas (xsd), xml and queries (XPath, XQuery).
    •    Data Bases – Oracle, MySQL, Postgres. Model Data Design (Erwin). Procedures/functions PLSQL y Triggers. Data Base Administration. (TOAD, SQLYog, pgAdmin).
    •    Shell Scripts - Automation of tasks (backup and installations) for a Ubuntu Server.
    •    Web Services.
    •    Version Control System - Source code and document management (subversion).
    •    Virtual Environments – virtualization of systems for test environments.

    - Dates: From June 2007 to December 2007
    - Company: Soluziona.
    - Role: Software Engineer
    - Main activities:
    •    Development and maintenance of a system for the risk management for the mobile phone company Orange. Programming with Java, C++, C, ORACLE administration with TOAD. Unix system.

    - Dates: From October 2006 to June 2007
    - Company: Tampere University of Technology - ENTHRONE Project.
    - Role: Software Engineer Junior
    - Main activities:
    •    Interconnection between a XML-Server and a Web application using Java servlets. The application handles and manipulates XML databases and multimedia contents using Tamino API and XQueries. Design of XML schemas and stylesheets, XML databases configuration, security access, backup and restore.

    - Dates: From October 2004 to June 2005
    - Company: Universidad Politécnica de Madrid (Systems Department).
    - Role: Software Engineer Junior
    - Main activities:
    •    Development of localization Software with Matlab (application for a robot).

    CERTIFICATIONS
    -    CEH v8 – Certified Ethical Hacking (EC-Council) - 2016
    -    ITIL v2– Foundation Certificate in IT Service Management - 2008

    COURSES

    -    Professional course of Python and Django. (AEPI) October 2016. 40h
    -    Expert in Python Programming. (CICE) September 2016. 30h
    -    Computer Forensics. July 2016. 25h
    -    Malware Analysis. June 2016. 25h
    -    Forensic analysis of mobile devices. June 2016. 10h
    -    Big Data for OSINT. April 2016. 60h
    -    Burp Suite tool. April 2016. 15h
    -    Nessus tool. March 2016. 15h
    -    MS PowerShell Scripting Advanced. December 2015. 16h
    -    Server Virtualization with Hyper-V. November 2015. 25h
    -    NATO Architecture Framework. October 2015. 6h
    -    Data Mining Fundamentals. June 2015. 16h
    -    HP Fortify, Web Inspect (SCA, SCC). Febrero 2015
    -    VMWare. Data Center Virtualization. December 2014. 40h
    -    MS PowerShell Scripting. October 2014. 16h
    -    Metasploit. Cidites. December 2013. 40h
    -    Forensic Analysis. Cidites. September 2013. 40h
    -    Github Immersion. December 2012. 10h
    -    HTML5 and CSS3. Imagina Formación. November 2012. 25h
    -    Oracle SQL expert. CEIM. March 2012. 25h
    -    Portlets developing. Atrium group. September 2011. 16h
    -    Actionscripts 3.0 Programming (Flash-Flex) - CEIM 30h
    -    Web Development with STRUTS 1.X. Eikasten_plus. 2010-2011.
    -    Web Applications with Ajax and JSP. Eikasten_plus. 2010-2011.
    -    JSP Programming. Eikasten_plus. 2010-2011.
    -    Microsoft Excel 2007 Advanced. Eikasten_plus. 2009-2010.
    -    Web Components development with Java Technology – Sun Microsystems. 2008. 32h
    -    Web Services Development – Sun Microsystems. 2008. 28h
    -    Client Service. PSICOSOFT. 2007. 20h

    SPECIFIC KNOWLEDGE
    -    Management Area
    o    Request for Proposal generation and provider selection.
    o    ITIL, CMMi, PMI, ISO2000 concepts.
    -    Management KnowledgePlatforms:
    o    Contents Management: Liferay
    o    Documents Management: Alfresco
    o    E-learning Management: Moodle
    o    Web Conferencing: BigBlueButton
    o    Users Management: Open LDAP
    -    Programming Languages and methodologies:
    o    Object-Oriented Programming: Java
    o    RIA (Rich Internet Application): Flex, AS3
    o    Structured Programming: C and Ada
    o    Functional Programming: Haskell
    o    Logic Programming: Prolog
    o    Embedded Systems: vhdl
    o    Interpreted languages: Python, Matlab, Maple, scripting
    -    Servers and cloud servers
    o    CentOS, Ubuntu Server, Windows Server
    o    Amazon Elastic Compute Cloud (Amazon EC2)
    -    Data Bases:
    o    Oracle, MySQL, PostgreSQL, Hsqldb, FireBird. Procedures, functions and triggers.
    o    Tamino XML-Server. XMLS schemas design and XQuery.
    o    CASE tool: Erwin and Data Architect.
    o    Data Base Administration: TOAD, SQLyog.
    o    Deductive Data Bases: WEKA.
    -    Software Engineering
    o    Specification and requirements analysis.
    o    Analysis. (Enterprise Architect tool). Use cases. Documentation and requirements.
    o    Design. Activity diagrams, classes and sequence.
    o    Procedures and test reports.
    -    Computing Tools
    o    Tamino Server-XML.
    o    Altova XML Spy (XML Scheme Design).
    o    Altova Style Vision (Style Sheet Design).
    o    Microsoft Office Visio. Flow diagrams, user interface design.
    o    Hardware language description. Vhdl, Tedmos.
    -    Office Software:
    o    Visio, Access, Excel Macros.

    LANGUAGES
    -    Advanced Level in English. Continued to attend English classes on regular weekly since October 2008 to build upon the level I achieved while studying my Erasmus course in Finland.
    -    Course 06/07 in TUT University (Finland). Full documentation of the Master Thesis Project in English.

    GROUPS – INTERESTS
    -    MadridJS, HTML5 Spain, Agile Spain

    INFORMATION OF INTEREST
    -    Publication of the report “Development of a Metadata Repository for a Digital Film Production Metadata based on the Material eXchange Format (MXF)” for the Institute of Signal Processing, Department of Information Technology, Tampere University of Technology, Finland, http://www.cs.tut.fi/sgn/namu/.
    -    Postgraduate Certificate in Education (PGCE). Universidad Complutense de Madrid.08/09.

     

    MASTER BIG DATA Y ANALISIS DE DATOS
    -    Data Models NoSQL with MongoDB - management, queries and information retrieval.
    -    Setting up a Hadoop system - ecosystem of tools and data processing.
    -    Programming and use of Python libraries for data analysis.
    -    Data Warehouse - obtaining relationships between data and makes decisions.
    -    Machine learning algorithms - used for data analysis.
    -    Lifecycle data analysis process - actors and coordination of the different tools.
    -    Export and import data and manage them in MongoDB, Hadoop and Python.


    MASTER J2EE DEVELOPER
    -    Agile Methodologies: Scrum, TDD
    -    Spring 3.0, Liferay Portlets, Spring MVC, Hibernate and Ibatis
    -    Java Server Faces, Struts1, Struts 2 and Liferay
    -    jQuery, prototype, script.aculo.us.
    -    RMI, JMS, Web services.

    MASTER J2SE DEVELOPER
    -    Developing JavaSE Applications.
    -    Birt. Business Intelligence and Reporting Tools
    -    Design Patterns
    -    Frameworks for developing JavaEE: Struts 1.x y 2.x, Spring (SpringCore, MVC, Webflow), JSF (Myfaces)
    -    Web portals solutions (Portlets, Liferay Portals and JSF (Myfaces))

    MASTER IN MANAGEMENT OF INFORMATION TECHNOLOGY
    Provides the necessary tools and knowledge for carrying out a successful management during the whole cycle life of an IT service.
    •    Project Title: Management Plan for a user attention service, Microcomputer and Development and Maintenance of SYCO program for the Aircompact Enterprise.
    •    Brief description: Service Management Plan related to the development and maintenance, Voice and Data Infraestructure, Microtechnology and Technology Consultancy of ISMIDE S.A. Collecting the Management Planning of Service Management with the intention of facilitating its development, monitoring and control.


    Registering is the only way of posting vacancies and obtaining contact details of candidates in our CV database.

    All it takes is a few minutes and a credit card (Visa or American Express). To sign-up to this service, simply click on the Register link and fill in the form. You will then have instant access to our system after on-line payment where you will be able to complete the transaction in either US Dollars, UK Pounds or Euros.

    All online credit/debit card transitions are handled through our secure third party payment processors at WorldPay. Worldpay are part of The Royal Bank of Scotland Group, the 5th biggest banking group in the world, WorldPay payment solutions are trusted by thousands of businesses, big and small worldwide. 

    Pricing starts at €450 (approx £400 or US$500 - use the convert tool for an exact conversion) for one month unlimited job postings and unlimited CV database access (for one user), with package discounts available if you have more permanent recruiting needs. For example, a Gold subscription will give you unlimited jobs posting and unlimited CV database access for one year at just over €250 per month!

     

    2019 Pricing Structure (excluding VAT):

    1 month - Discovery 450 euros convert
    3 months - Bronze 1150 euros convert
    6 months - Silver 1950 euros convert
    12 months - Gold 3200 euros convert

     

    If online payment is not convenient, give us a call at +33(0)622757477 or send us an email at sales@space-careers.com. We will set up an account for you and invoice you. Note that you can also pay through PayPal.

     

    Subscriptions

     

    Please note that the posting of academic positions is free of charge. All you need to do is email us your job description and we will post it for you.

     

    VAT:

    Spacelinks is based in France so the following European Union regulations regarding electronic commerce apply:
    - if your business is located outside the EU, VAT does not apply to you
    - if your business is located in France, you will be charged a 20% VAT
    - if your business is located in the EU and you don't have a valid VAT registration number, you will be charged a 20% VAT
    - if your business is located in the EU and you do have a valid VAT registration number, you won't be charged VAT provided you give us your VAT number (mandatory for invoicing)

     

    Support:

    For sales enquiries and general information, you can call us on +33(0)622757477.
    Support is available Mon-Fri on +33(0)622757477 or via email. Out-of-hours support is provided only via email.

    Please also note that we are located in France. Our normal office hours are 09:00 to 18:00 Monday to Friday. France timezone is GMT+1.

     

    Warning:

    We are very serious about our job seekers privacy so only legitimate recruiters and employers are eligible for a recruiter account. All subscriptions requests will be manually approved and recruiter accounts constantly monitored. Users who enter inaccurate or incomplete information will not gain access to post jobs or search resumes. Sharing of login details with a third party will result in the suspension of the recruiter's account with no subscription refund.
    Recruitment agencies are only eligible for a Gold package and recruitment agencies recruiting for companies already using Space Careers will not be accepted.

    To ensure you are approved, please include the following on your application:
    * The website address of your Company. Under construction websites will be rejected.
    * Email - Must end in @yourcompany.com. Applications using free email accounts such as Hotmail, Yahoo or Gmail will be rejected.

    Individual exceptions can be made on a case by case basis by emailing sales@space-careers.com. Accounts found not to be in compliance will be deleted.

     
    Terms & ConditionsCopyright ©2018 Spacelinks
    Web Analytics