Based in Tilburg, the Netherlands. Open to roles in the Netherlands and to remote contract work.
Lawyer and security practitioner who turns legal and regulatory requirements into working controls.
2025
2026
2025
2022LanguagesSpanish (native), English (C2)
Selected work
SOC 2 Type II support across 220+ repositories at a cybersecurity company, the information security of a law firm whose AI paralegal reads client email, and a trademark platform built with data protection and audit trails from the start.
SOC 2 Type II and secure frontend work
Security and frontend work at a cybersecurity company: SOC 2 Type II certification support, findings triaged across 220+ repositories, remediation coordinated with development teams, and security fixes shipped without delaying features.
220+repositories triaged for SOC 2 Type II
Securing a law firm
Information security for a law firm whose AI paralegal reads client email: least-privilege Microsoft 365 permissions with sending removed, sandboxed agent runs, private-network admin access, Wazuh monitoring and versioned backups.
2.2 minmedian from email to draft
Security and data protection by design
A trademark platform built for several firms on one system: organization-scoped data, rate limits, hashed IP addresses, signed payment webhooks and audit trails, under Ecuador's data protection law (LOPDP).
170,000+manual comparisons a month, for 100 brands
Contact
In the Netherlands, and remote contract work.