nullsector/miguel-zabala es en

~/en/about $ cat README.md

Miguel Zabala

Founder & CEO @Xpectra.ai · Offensive Security Engineer · OSCE³

Offensive security engineer with 11 years in the field. I have worked as a pentester and consultant in Colombia, Spain and Denmark, and today I do pentesting and red teaming at Aiuken Cybersecurity.

In 2024 I founded Xpectra.ai, where I lead a team of six AI agents supervised by experts: the depth of a pentest, at the speed of a scanner.

Aeronautics, OT, railway, banking, government and the private sector: environments where a test cannot take production down. I hold all six hands-on OffSec certifications, including OSCE³, plus CEHv9.

Nullsector is my lab. There I research how AI agents rebuild real exploits and build tools such as RGS, an honorable mention in NVIDIA's generative AI agents contest.

→ let's talk linkedin ↗ github ↗ youtube ↗
01

Experience

cat experience.log
  1. 2024 — present Founder & CEO @ Xpectra.ai ↗ founder Pentesting with AI agents supervised by experts: the depth of a pentest at the speed of a scanner. LATAM · ES
  2. 2023 — present Penetration Tester @ Aiuken Cybersecurity Infrastructure and web application pentesting, red teaming and custom exploits. Remote · CO
  3. 2022 Security Consultant @ CSIS Security Group A/S Offensive security consulting and research on emerging threats. Copenhagen · DK
  4. 2019 — 2021 Penetration Tester @ Mnemo Advanced penetration testing, threat simulation and red team exercises. Madrid · ES
  5. 2018 — 2019 Ethical Hacker @ Entelgy Web application security, code review and technical reporting. Bogotá · CO
  6. 2017 — 2018 Ethical Hacker @ Newnet S.A. Vulnerability assessment and intrusion testing. Bogotá · CO
  7. 2015 — 2017 CISO @ Colombian Outsourcing Solutions Risk management, IT audit, incident response and team training. Bogotá · CO
02

Certifications

ls ~/certs
  • OSCE³ OSWE + OSED + OSEP
  • OSEP OffSec Experienced Penetration Tester
  • OSWE OffSec Web Expert
  • OSED OffSec Exploit Developer
  • OSCP OffSec Certified Professional
  • OSWP OffSec Wireless Professional
  • CEHv9 Certified Ethical Hacker v9

OffSec: 24 to 72-hour practical exams with real exploitation. OSCE³ is awarded for holding OSWE, OSED and OSEP.

03

Education

  • Systems EngineerFundación Universitaria del Área Andina 2023
  • Data Systems TechnologistUniversidad Distrital Francisco José de Caldas 2018
04

Languages

  • Spanish native
  • English B2
  • Japanese A1
05

Skills

PentestingRed teamExploit developmentReversingCode reviewWebActive DirectoryOT / ICSOffensive AIPythonC#JavaPHP
06

Recognition

Honorable mention for RGSRGS writes the full report of an audit with a local LLM (Mistral 7B on TensorRT-LLM). The judges of the generative agents contest singled it out among the submitted projects. NVIDIA · GenAI Contest Four CVEs chained by AI agentsGitLab, PaperCut, Gitea and Zimbra rebuilt in isolated labs, with the defensive telemetry and the log of the agent's failures published. Own lab
All six hands-on certificationsOSCE³, OSEP, OSWE, OSED, OSCP and OSWP: 24 to 72-hour practical exams with real exploitation, not multiple-choice tests. OffSec
~/contactreply < 24 business hours · es / en

you@nullsector:~$ mail miguel

[email protected]

Collaborations, talks, press or research: write to me.

Need a pentest or a vulnerability assessment? Request it at Xpectra.ai ↗

send an email xpectra.ai ↗ linkedin ↗