JUAN IDROVO

Kriptos Inc., Miami, FL, USA (Remote)

• Developed the frontend of the Update Manager platform, used by enterprise clients including Latin American banks to deploy and monitor Windows security agents across thousands of endpoints: 37,000+ lines of production TypeScript and React as the main contributor to the core repository, including real-time agent status, automated deployment workflows and role-based access control (RBAC).
• Supported SOC 2 Type II certification by triaging findings from SonarCloud, Amazon Inspector and Hexstrike across 220+ repositories and coordinating remediation with development teams; implemented security fixes in the main frontend (authentication flows, dependency updates, input validation) without delaying feature delivery.

Grace Nelson Attorneys at Law, Cuenca, Ecuador (Remote)

• Designed, built and operate an AI paralegal for the firm's shared mailbox: each client email triggers a sandboxed Claude agent that updates the client file, files attachments, consults a cited knowledge base and drafts an unsigned reply in Outlook for attorney approval. Median 2.2 minutes from email to draft (November 2026); 2.8% failure rate across 1,379 runs.
• Lead the firm's information security: least-privilege Microsoft Graph permissions (send rights removed and verified), DKIM and DMARC, sandboxed agent runs that can change only one client's file, administrative access only over a private network, self-hosted Wazuh monitoring, versioned off-site backups and daily snapshots; write post-incident reviews and remediate root causes.
• Developed the pipeline specification-first in Python (~38,000 lines, 2,869 automated tests): Microsoft Graph polling, a SQLite event queue, sandboxed systemd services and timers, retries, usage limits and health alerting; every deployment gated by the full test suite.

Markatzy, Trademark Protection Platform (markatzy.com)

• Designed, built and launched independently a trademark protection platform for the Ecuadorian intellectual property market, in production with a free tier. For a firm with 100 brands, it replaces more than 170,000 manual comparisons per month and narrows results to the conflicts that warrant attorney review.
• Designed for multi-tenant security: organization-scoped queries enforced at the API layer, tiered rate limiting against registry scraping, hashed IP addresses, idempotent payment webhooks, and audit trails for data corrections and administrative actions.

Grace Nelson Attorneys at Law, Cuenca, Ecuador

• Managed immigration procedures for 100+ U.S. nationals per year with a 98%+ approval rate and coordinated 50+ real estate closings.

IMBAIP Cia. Ltda., Quito, Ecuador

• Managed registration, opposition and appeal proceedings for 200+ trademark applications before SENADI, Ecuador's national IP office, and drafted enforcement actions against infringers.

Tilburg University, Netherlands

Privacy and data protection law, cybersecurity law and the regulation of AI.

University of Texas at Austin, McCombs School of Business, USA

Executive education, certificate of completion; GPA 4.13/4.33. Network security, modern cyber attacks, security controls, governance, risk and compliance (GRC).

BrainStation (Konrad Group), London, United Kingdom

Winner of the Lloyds Banking Group partnership hackathon (fraud detection prototype) and of a scholarship for cybersecurity training.

Universidad San Francisco de Quito, Ecuador

Thesis on central bank digital currencies in dollarized economies. Coursework in intellectual property, technology law and international commercial law.

Python data pipeline with 20 collectors (SEC filings, memory prices, Taiwanese and Korean trade data, grid interconnection queues, earnings-call keywords) loading SQLite; weekly scoring of a written investment thesis, reviewed by a sandboxed Claude agent and delivered as an email report; backtest of trading rules against SMH and a fixed control portfolio; Datasette site on a private network; nightly backups to Amazon S3.