Security Specialist @ AWS · Cloud Security · Dublin 🇮🇪
Helping secure the cloud, one key at a time.
I'm a Security Specialist at AWS based in Dublin, Ireland, originally from Rosario, Argentina. My work focuses on cloud security, threat detection, IAM, incident response, security automation, and DDoS resiliency. Lately I've been exploring the intersection of AI and security, from building GenAI-powered solutions to leveraging Claude for security workflows. I'm passionate about building secure-by-default architectures and sharing what I learn through whitepapers, blog posts, and conference talks.
- IAM security hardening and access key risk assessment
- Threat detection and remediation strategies for cloud environments
- Incident response playbooks and forensic analysis in AWS
- Security automation to scale protection across accounts and services
- DDoS resiliency architectures using AWS Shield, WAF, and CloudFront
- Built production LLM-powered tools using Anthropic Claude via Amazon Bedrock — automation that analyzes complex data sets and generates actionable insights.
- Using Amazon Kiro for spec-driven development — built the aws-iam-access-keys-risk-assessment and aws-root-account-review tools with Kiro's structured approach to AI-assisted coding
- Developing with Claude Code and VSCode + Claude for day-to-day AI-assisted development workflows
- Designing GenAI security architectures — model selection, context engineering, output evaluation, and security guardrails for AI workloads
- Driving AI/ML security best practices at AWS — Amazon Bedrock secure deployment, Amazon Q security, and GenAI workload protection
- 🎓 Preparing for Claude Certified Architect - Foundations (May 2026)
- aws-root-account-review — Organization-wide root user security posture evaluation with 40+ checks across 10 categories, aligned with CIS Benchmark v5.0.0 · Python
- aws-cis-controls-assessment — Security framework for evaluating AWS accounts against CIS Controls v8.1 (IG1/IG2/IG3) with 199 assessment rules · Python
- aws-iam-access-keys-risk-assessment — Security assessment tool for AWS IAM access keys risk evaluation · Python ·
- aws-threat-detection-summit — Resources from AWS Summit threat detection talk ·
- abac-policies-for-ec2-instances-and-ssm-session-manager — ABAC policy configuration for EC2 and SSM Session Manager · Python
- cloud-trail-lake-query-samples — Sample queries for AWS CloudTrail Lake (fork)
- DoVPN — Automated OpenVPN deployment using Docker · Shell ·
- AWS Breaking Barriers Challenge 2026 — 🥇 Hackathon Winner, Dublin · Jan 2026 Won the AI-focused hackathon at the AWS Breaking Barriers Challenge. Teamed up with Rehab Group to build an AI-enabled care platform providing real-time, personalized support to vulnerable individuals across Ireland. Rehab Group was awarded a €100,000 AWS Imagine Grant to bring the solution to production. Judged by Jeff Barr (VP, Chief Evangelist) and other AWS leaders.
- Anthropic Claude in Amazon Bedrock (Sep 2025)
- AWS Certified Machine Learning Engineer - Associate (May 2026)
- AWS Certified Security - Specialty (Aug 2024, expires Aug 2030)
- AWS Certified Solutions Architect - Associate (Nov 2018, expired)
- ISC2 CISSP - Certified Information Systems Security Professional (Feb 2009)
- MTCNA MikroTik Certified Network Associate (Nov 2011)
- 📄 Secure Content Delivery with Amazon CloudFront — AWS Whitepaper, Apr 2024
- 📝 Four use cases for GuardDuty Malware Protection On-demand malware scan — AWS Security Blog, Dec 2023
- 📝 Investigate security events by using AWS CloudTrail Lake advanced queries — AWS Security Blog, Apr 2023
- 📄 AWS Best Practices for DDoS Resiliency — AWS Whitepaper, Apr 2022
- 📝 Configure AWS SSO ABAC for EC2 instances and Systems Manager Session Manager — AWS Security Blog, Jan 2022
- 📝 Using ACM Private Certificate Authority in a multi-account environment by using IAM roles — AWS Security Blog, Jul 2020
- 📝 Configure Session Manager access for federated users using SAML session tags — AWS Management & Governance Blog, Jul 2020
- Lessons learned from DDoS: Insights from AWS SRT escalations — AWS re:Invent 2024, Dec 2024 Chalk Talk · Security, Compliance & Identity track · 86.2% capacity · Speaker rating 4.48/5
- Lessons learned from DDoS: Insights from AWS SRT escalations — AWS re:Inforce 2024, Jun 2024 Chalk Talk · Network & Infrastructure Security track · Full capacity · Speaker rating 4.7/5
- Threat detection & remediation in the Cloud — AWS Summit London 2022, Apr 2022
📍 Dublin, Ireland 🇮🇪
💼 Currently: Security Specialist @ AWS