About

Francisco Javier Jiménez Gómez

Security Architect & Senior Developer

Specialist in Static Application Security Testing (SAST), Security Audits, Secure Software Development Life Cycle (S-SDLC), and Ethical Artificial Intelligence. More than 15 years of experience leading complex technological projects.

📍 Spain


Certifications

  • CISM Certified - Certified Information Security Manager
  • AWS Solutions Architect
  • Scrum Manager
  • OWASP Top 10 Trainer

Professional Experience

Security Architect and Developer

Independent Consultant / Brisecom · 2020 - Present

Leadership in source code security audits (SAST) using automated tools and custom scripts. Design of secure architectures based on code analysis and threat modeling.

Instructor for the “OWASP Top 10” course and consultant in the implementation of Secure Software Development Life Cycles (S-SDLC) for DevOps teams and developers.

Technologies: SAST, Threat Modeling, DevSecOps, OWASP, S-SDLC

Senior Java Developer

Clever Global (formerly iSOCO) · 2015 - 2019

Main developer in the view team with JSF for Endesa’s SerCAE ONE platform. Implementation of microservices with Docker, quality management with SonarQube, and use of Agile methodologies.

Technologies: Java, JSF, Spring, Docker, Microservices, SonarQube

Open Source Developer

guifi.net Foundation & UPC · 2013 - 2014

Lead developer in European projects Clommunity and CONFINE regarding community networks. Significant contributions to the free software ecosystem and community telecommunications.

Technologies: Linux, Open Source, Community Networks, LXC


Technical Skills

🛡️ Security & DevSecOps

SAST/DAST · Code Audit · Threat Analysis · S-SDLC · OWASP Top 10 · CISM · AWS Security

💻 Programming & Frameworks

Java · Spring/Spring Boot · JavaScript · Python · JSF · Hibernate · C/C++

☁️ Cloud & Infrastructure

AWS Solutions Architect · Docker · Linux Admin · Git · CI/CD (Jenkins) · MySQL/PostgreSQL

🗣️ Languages

  • Spanish - Native (C2)
  • English - Advanced (C1)
  • Valencian - Advanced (C1)

Cloud Linux Distribution “gcodis”

Debian GNU/Linux based distribution optimized for cloud environments, using LXC and Docker. Open source project focused on resource efficiency and rapid deployment.

🔗 Code on GitHub

Distributed DNS Cache “ddnsc”

Distributed DNS cache system for publishing services, implemented entirely in shell script. Lightweight solution for decentralized networks.

🔗 Code on GitHub

Demo Online Store Portal “store”

Complete demo online store application developed in Java with JSF and Hibernate. Example of enterprise architecture for training and demonstration.


Contact

Interested in collaborating on projects regarding security, secure development, or AI ethics? Don’t hesitate to contact me.

Licensed under CC BY-NC-SA 4.0
Built with Hugo
Theme Stack designed by Jimmy