I break firmware so attackers can't. I teach investigators to follow the bits.
I'm a Tenured Associate Professor at the University of Almería (Spain), working where deep technical research meets real-world security operations. My work spans three fronts that feed each other:
🔬 Research — Firmware security (UEFI/BIOS/TPM/SMM), memory forensics, AI-enabled threats, and cryptographic protocols for constrained environments.
🚔 Law Enforcement Training — Hands-on technical training for cybercrime units, forensic analysts, and intelligence teams across Europe: malware analysis, OSINT, firmware attacks, and AI-assisted impersonation threats.
🎓 Teaching — Computer architecture, operating systems, digital forensics, and security — from undergraduate fundamentals to specialized professional training.
The common thread: turning low-level technical knowledge into operational capability for the people who defend systems and investigate crime.
| Area | What I'm Working On |
|---|---|
| 💾 Firmware & Supply Chain | UEFI/BIOS attack surfaces, SMM abuse detection, TPM-based trust, bootkit forensics |
| 🧠 AI Security | LLM risks in organizations, AI-assisted cybercrime, identity impersonation and deepfake threats |
| 🧪 Memory Forensics | Volatility 3 plugin development — credential scanning, SMI/SMM abuse detection on Windows |
| 🛰️ Critical Infrastructure | ICS/SCADA exposure in agro-industrial environments, secure IoT and wireless sensor networks |
| 🔐 Cryptography | Post-quantum readiness, lightweight crypto for embedded and IoT systems |
Low-level & Systems
C C++ Assembly Python Bash — on Linux Windows QEMU
Security & Forensics
Ghidra Volatility 3 Wireshark OSINT tooling Censys pyModbusTCP
Engineering & Docs
Git Docker GitHub Actions LaTeX Markdown
| Repository | Description |
|---|---|
| 🧪 volatility3-plugins | Memory forensics plugins: credential pattern scanning & SMM abuse detection |
| 💾 firmware-security-labs | Hands-on UEFI/BIOS/TPM labs for training and research |
| 🚔 lea-training-materials | Technical training resources for law enforcement cybercrime units |
| 🛰️ scada-exposure-toolkit | ICS/SCADA exposure assessment for agro-industrial environments |
| 🎓 teaching | University course materials: architecture, OS, forensics, security |
I actively collaborate with European law enforcement training initiatives, public institutions, and industry on applied cybersecurity. I'm also involved in Erasmus+ and international academic mobility.
Open to: research collaboration · LEA/professional training · invited talks · supervision of strong thesis projects in firmware security, forensics, or AI threats.
Cybersecurity, research, education and public service — through applied technical knowledge.