Software Engineer based in Quito, Ecuador, with more than 15 years of experience building enterprise web and mobile applications.
I specialize in secure digital banking and financial technology, working across frontend, mobile, and backend systems with React, React Native, Java, and Spring Boot.
My current professional focus is Secure Digital Banking & Fraud Prevention Engineering, including fraud-risk decision systems, authentication, transaction security, resilience, observability, and maintainable financial software.
- Secure digital banking and fraud prevention engineering
- Fraud-risk evaluation and explainable decision systems
- React and React Native application architecture
- Java and Spring Boot backend services
- Authentication, biometrics, device trust, and transaction security
- Resilient integrations with external services
- Automated testing, CI/CD, and software quality
- Application security and threat modeling
An explainable and auditable fraud-risk decision engine for synthetic authentication and transaction events.
Version v1.0.0 demonstrates deterministic risk scoring, explainable rule results, PostgreSQL-backed audit persistence, a lightweight hexagonal architecture, Docker Compose execution, automated testing, reproducible synthetic benchmarking, security architecture documentation, and a STRIDE-based threat model.
The project uses exclusively fictional and synthetic data and does not contain proprietary employer, client, vendor, financial institution, or customer information.
Full-stack React, Node.js, Express, and MongoDB application demonstrating automated testing, backend validation, GitHub Actions CI/CD, deployment automation, health checks, and protected pull-request workflows.
Continuous integration and deployment project demonstrating ESLint, Jest, Playwright E2E testing, Webpack production builds, controlled Render deployments, automated version tagging, deployment notifications, and GitHub Actions workflows.
Contributed documentation on Static Application Security Testing (SAST) and Semgrep Community Edition to the OWASP Developer Guide.
The contribution covers SAST fundamentals, Semgrep Community Edition usage, rules and patterns, taint analysis, workflow integration, limitations, and technical references.
The contribution was accepted and merged into the OWASP Developer Guide through Pull Request #220, closing Issue #88.
I build public reference implementations and technical documentation around:
- Fraud prevention and explainable risk decisions
- Secure mobile banking patterns
- Digital banking architecture
- Authentication and transaction-security workflows
- Application security and threat modeling
- Resilience and observability for financial systems
My public projects are intentionally separated from employer and client systems. They use synthetic data, generic architectures, and independently written implementations.
Frontend and Mobile: React, React Native, TypeScript, JavaScript, Redux
Backend: Java, Spring Boot, Node.js, Express, GraphQL
Data: PostgreSQL, SQL
Engineering: GitHub Actions, Docker, automated testing, REST APIs, CI/CD
Security: Threat modeling, secure software design, authentication patterns, fraud-risk engineering