Xabier Perez Alonso

< Systems & Cybersecurity / Software Developer / Incident Response />

Systems and cybersecurity technician with over 6 years of experience in corporate and industrial environments. Master's degree in Cybersecurity (UNIR, 2026), with a thesis on Red/Blue Team simulation aligned with Spain's National Security Framework (ENS) and the MITRE ATT&CK framework. Hands-on incident response experience: forensic analysis and system restoration following a cyberattack in an industrial environment. Strong foundation in infrastructure (Active Directory, Windows Server, virtualization), complemented by web development (ASP.NET MVC, SQL Server).

Let's talk LinkedIn ↗

// Professional experience

Feb 2024 – Present

Software Developer — ASP.NET MVC & SQL Server

▸ OCTÉ · Hernani

  • Designed and built a corporate web application from scratch in ASP.NET MVC with DevExpress for box-filling management.
  • Development of the company's time-tracking application: employee clock-in/out logging and management of time records by HR.
  • Creation and management of web APIs for integration and communication between internal applications and services.
  • Version control and continuous deployment with Azure DevOps; implementation and maintenance of SQL Server databases.
  • Maintenance and evolution of internal software, ensuring the availability, stability and security of applications.
Feb 2023 – Feb 2024 ⚠ real incident

Support & Systems Technician — Client: ULMA Carretillas

▸ INYCOM · Oñati

  • Led forensic analysis following a real cyberattack: reviewing affected systems, collecting evidence and coordinating with the technical team to identify vulnerabilities and mitigate impact.
  • Restored compromised systems and implemented new security policies, helping bring the plant back into operation.
  • Designed and ran a simulated phishing campaign targeting ULMA employees to assess and strengthen the workforce's security awareness.
  • Implemented full-disk encryption with pre-boot authentication on company devices, protecting data against theft or loss of physical equipment.
  • On-site and remote support for ~60 users (hardware, software and networking), managing incidents through a ticketing system.
  • Installation and configuration of Windows/Linux devices and troubleshooting of business applications (ERP, CRM).
Sep 2022 – Jan 2023

Programmer

▸ Logikaline · Abaltzisketa

  • Internship (350 h). Developed C# software for inventory management, automating the process.
  • Collaborated on user interface design and code reviews.
Feb 2018 – Sep 2022

Support & Systems Technician

▸ XAMAR Asesoría

  • Deployed network infrastructure with Active Directory: centralized server, users, permissions and shared resources.
  • Administration and support of ERP systems (installation, configuration, updates and data migrations).
  • Customer support for incidents and preventive/corrective maintenance of systems.
Sep 2019 – Dec 2019

Support & Systems Technician (Internship)

▸ Grupo LAE · Donostia

  • Internship (260 h): diagnosing and repairing computer equipment and managing inventories.

// Featured project

Thesis — Red/Blue Team Simulation Aligned with ENS

2025 – 2026

▸ UNIR · Master's in Cybersecurity

>_

Virtualized lab (VirtualBox) applied to an industrial SME in the Basque Country as a real-world case study.

>_

Defensive stack: Wazuh (SIEM), Suricata (IDS/IPS), pfSense (LAN/WAN/DMZ segmentation, pfBlockerNG).

>_

Offensive side with Kali Linux: brute-force (Hydra), vulnerability analysis (Nmap), XSS/CSRF (DVWA, Metasploitable2).

>_

Hardening (Fail2Ban, Auditd, Lynis) and alignment of controls with the ENS and the MITRE ATT&CK framework.

// Technical stack

SECURITY

Wazuh (SIEM) Suricata pfSense Kali Linux Forensic analysis Hardening Pentesting Auditing

SYSTEMS & NETWORKS

Windows Server Active Directory Linux VMware Hyper-V VirtualBox TCP/IP VPN

DEVELOPMENT

C# ASP.NET MVC DevExpress JavaScript PHP HTML/CSS

DATABASES

SQL Server T-SQL MySQL Oracle

DEVOPS

Azure DevOps Git CI/CD

// Education

Master's Degree in Cybersecurity

COMPLETED

UNIR – International University of La Rioja

Oct 2025 – Jul 2026

Higher Vocational Training – Multiplatform Application Development (DAM)

SEIM · Donostia

Sep 2021 – Feb 2023

Higher Vocational Training – Network Systems Administration (ASIR)

SEIM · Donostia

Oct 2017 – Jan 2020

LANGUAGES

Spanish Native
Basque Native
English Intermediate

ADDITIONAL INFO

  • Driving licence (Category B)
  • High availability to travel

// Contact

Looking for someone who understands both the infrastructure and the code running on top of it? Get in touch.

EMAIL xabierperez5@hotmail.com PHONE 688 654 877 LINKEDIN xabier-perez-alonso ↗