Arnau Estebanell Castellví

Since I was hacked when I was 16 years old, cybersecurity has been my passion. With more than five years of cybersecurity experience in different areas, now I work to make companies more secure.

What I Do

Ethical Hacking

Holding various offensive security certifications and with professional experience as a lead penetration tester, I can work as an Ethical Hacker, finding vulnerabilities in your application before the bad guys do.

During my previous professional experience, I have developed and applied a pentesting methodology in an international, publicly traded company.

Application Security

Finding vulnerabilities is not the end of the story. You need to manage them, helping development teams ensure the fix they deploy is not bypassable and that it is deployed in a timely manner according to your vulnerability management program.

With experience in a variety of frameworks and programming languages, I will make sure improvements made to your application are as robust as they can be.

DevSecOps

Manual work does not scale. That is why it is important to shift left security, adding security wherever necessary without slowing development and using automation whenever possible.

SCA, SAST, DAST, Code Review and Threat Modelling are some of the buzzwords I work with.

Conscious Security

Security needs to be business aware, being an enabler instead of a blocker.

I enjoy technical work, but I also enjoy making meaningful changes in companies. To achieve the latter, it is essential to have a human approach, justifying your decisions and educating users on the way to get them to see security as a benefit instead of a toll.

Who I Am

Musician

I started my formal music education when I was six years old. With a specialisation in violoncello, I took regular harmony, voice and violoncello classes until I turned 18 years old.

In my free time I enjoy playing my guitars, piano and cello. I also sing as much as I can, both at home and going to the karaoke now and then.

Nature & Hiking

Since I was a kid and until I turned 24, I was a member of a boy scouts group. During my last five years in the non-profit association, I volunteered as a youth recreational leader.

During those years, I did many activities in nature, mainly hiking but also survival and orientation workshops.

Curiosity

I believe curiosity is a trait that describes me, especially regarding technology, finances and politics. If you don't find me working or gaming, you will probably find me reading about some of the topics above.

Gaming

Gaming introduced me to cybersecurity many years ago. Today, I enjoy spending time playing with my friends games such as AoE2, WoW, Rocket League, Brawlhalla.

Certifications

Books

Books that I've recently read or I'm currently reading, and that I recommend.