Exploravia
Designed and led the new generation of the travel-guide platform.
See the projectAbout
Full-stack software engineer and CTO at Alpelupe Soluciones. I like being close to the code: I design the architecture of our products, from the backend to the apps, and I build them.
How I work
- Design against interfaces, not implementations: the core does not depend on specific data, cloud or AI providers.
- Security and quality by design (shift-left): automated testing, continuous code analysis and deployments with automatic rollback.
- Infrastructure as code and observability across everything we deploy.
Read moreRead less
Background
Before that, at the University of Murcia, I spent two years as a software, QA and DevSecOps engineer at CyberDataLab, working on COBRA, a cyber range for the Spanish Joint Cyberspace Command that we took from prototype (TRL 4) to operational product (TRL 8-9), and on SCORPION, its civilian version for universities and companies. Then, in the ANTS research group, I built the enterprise blockchain module of CyberSOC Pymes, a SOC for SMEs: it brings traceability to threat-intelligence sharing and makes it possible to audit that privacy-enhancing policies (PET) remove sensitive data before it is shared via STIX/MISP.
Education
BSc in Computer Engineering and MSc in Software Engineering (9.37/10 average) from the University of Murcia, with highest honours in Programming Technology, Algorithms and Data Structures, Project Management and Secure Software. Undergraduate research assistant and winner of the Murcia Region Informatics Olympiad (graphics category).
Outside work I write about technology, geopolitics and democracy.
Now
CTO · Alpelupe Soluciones S.L.
Jan 2026 - present · Águilas · hybrid
Hands-on role: I design and build the company's products and I am ultimately accountable for everything technical.
TUDI
Multi-tenant AI assistant for chat, phone and WhatsApp.
See the projectPlatform
Clean architecture with architecture checks in CI, infrastructure as code, CI/CD with verified deployments and automatic rollback, observability and continuous quality and security analysis. Servers, domains and the clients' WordPress website portfolio.
Leadership
Budgets, technical specifications for tenders, planning and coordination of in-house and freelance developers. Digitalisation provider in Kit Digital, Kit Consulting (AI and data analytics) and Kit Espacios de Datos. Technical oversight of TuDI Studio.
- TypeScript
- NestJS
- React
- React Native
- Python
- MongoDB
- Redis
- vector databases
- LLMs
- Docker
- GitLab CI
- Ansible
- Grafana
Experience
Jan 2026 - present · Águilas · hybrid
CTO
Alpelupe Soluciones S.L.
Hands-on role: I design and build the company's products and I am ultimately accountable for everything technical.
- Exploravia: designed and led the new generation of the travel-guide platform. Multi-tenant and offline-first: web, white-label native apps for each destination from a single codebase, and a dashboard where each client manages its content. Adaptive-streaming 360° video, audio guides, offline maps, historical recreations made with generative AI (Tierras de Libertad) and augmented reality over the landscape (Miradores Inteligentes). Planned the migration of the whole fleet of client apps without breaking existing installs.
- TUDI: multi-tenant AI assistant for chat, phone and WhatsApp. Real-time voice with handover to a person, a summary of every call, links to each client's booking engine and provisional bookings that roll themselves back if something fails. Tool-using agent with RAG, safeguards against hallucinations and prompt injection, and a decoupled LLM provider.
- Platform: clean architecture with architecture checks in CI, infrastructure as code, CI/CD with verified deployments and automatic rollback, observability and continuous quality and security analysis. Servers, domains and the clients' WordPress website portfolio.
- Leadership: budgets, technical specifications for tenders, planning and coordination of in-house and freelance developers. Digitalisation provider in Kit Digital, Kit Consulting (AI and data analytics) and Kit Espacios de Datos. Technical oversight of TuDI Studio.
Read moreRead less
Stack: TypeScript, NestJS, React, React Native, Python, MongoDB, Redis, vector databases, LLMs, Docker, GitLab CI, Ansible and Grafana.
Jul 2025 - Jan 2026 · Murcia · hybrid
Software Engineer · Blockchain & Cybersecurity
ANTS Research Group · University of Murcia
CyberSOC Pymes project, in the ANTS research group at the University of Murcia and in collaboration with Inforges. A complete security operations centre (SOC) for SMEs bringing together SIEM, SOAR, cyber threat intelligence (CTI), ITSM and AI/ML analytics dashboards to monitor, investigate and contain incidents in real time. The platform reached TRL 8 and gives SMEs enterprise-grade protection.
I led the design and deployment of the enterprise blockchain module:
Read moreRead less
- Immutable ledger on Hyperledger Fabric: it records the fingerprint (hash) of every threat-intelligence exchange without exposing each organisation's private data.
- Automatic validation and auditing of privacy-enhancing policies (PET): it proves that sensitive data was removed before information is shared via STIX/MISP.
- API and smart contracts connecting the ledger to the SOC's privacy service.
- Traceability and integrity for regulatory compliance (GDPR, NIS2) without SMEs taking on the usual complexity of these solutions.
Stack: TypeScript, Hyperledger Fabric, Docker.
Jul 2023 - Jul 2025 · Murcia · on-site
Software Engineer · QA · DevSecOps
CyberDataLab · University of Murcia
COBRA project for the Spanish Joint Cyberspace Command (Ministry of Defence), at CyberDataLab, University of Murcia. COBRA is a cyber range: a platform to simulate cyberattacks and to train, assess and certify military personnel in cyber defence, with hyper-realistic advanced persistent threat (APT) scenarios, challenges adapted to each participant's level, and gamification. We took it from prototype (TRL 4) to operational product (TRL 8-9), following the highest quality and security standards. I also worked on SCORPION, its civilian version for universities and companies.
Responsibilities
Read moreRead less
- Contributed to the design of the microservice architecture, built to scale complex scenarios and simultaneous exercises.
- Microservice development in Python.
- DevSecOps: security built into the whole development lifecycle and continuous integration pipelines.
- Observability to monitor system health and performance, plus telemetry with real-time performance-metric dashboards.
- Wrote and led the requirements, system architecture and technology analysis and selection documents.
- Designed and ran test plans to validate the client's contractual requirements.
Jul 2020 - Jul 2023 · Part-time
Full-stack Web Developer
Alpelupe Soluciones S.L.
Part-time full-stack developer at Alpelupe Soluciones alongside my degree. My main focus was Exploravia, and I also built web projects for clients in very different sectors: e-commerce, law firms, tourism and more.
- Frontend: React and TypeScript web applications with hexagonal architecture, RxJS and component libraries such as Material UI and Bootstrap.
- Backend: NestJS (Node.js) and PHP Laminas MVC modules, both for internal content-management tools and for public-facing website views.
- WordPress and e-commerce: websites and online shops for private clients and for public programmes such as Kit Digital, choosing the right page builder, theme and plugins for each project, with a focus on performance, SEO and security. For example: Elementor, JetEngine, WooCommerce, Yoast SEO, Wordfence or WP Rocket.
- Web infrastructure: domains, DNS, CDN, hosting and deployments on different providers depending on the client (Cloudflare, Ionos, Cloudways, among others).
- Consulting: accessibility and usability audits, including within public programmes such as Kit Digital.
- Clients: requirements gathering, meetings and direct follow-up to meet each project's goals.
Projects
A tour of Exploravia
Pick a feature to see its screen in the app
Also includes
Augmented reality
Miradores Inteligentes: the real landscape labelled with the name, distance and altitude of each point.
Multi-tenant and self-service
Councils, museums and businesses publish and edit their content on their own.
Whole-fleet migration
Planned to move client apps to the new generation without breaking existing installs.
How it works
Dashboard
Councils, museums and businesses publish their places, routes and videos.
Multi-tenant platform
One backend serves every destination, each with its own content.
Web and apps per destination
PWA and white-label native apps built from the same code.
The visitor
Downloads the guide and uses it on site, with or without signal.
The project and my role
Multi-tenant digital travel-guide platform for public and private clients: town councils, rural development associations, museums, campsites and tourism businesses. Web, native apps for each destination from a single codebase, and a dashboard where each client manages its content. It works offline, with downloadable maps, audio guides, 360° video, historical recreations produced with generative AI (such as Tierras de Libertad or El Rasillo de Cameros) and augmented reality over the landscape (Miradores Inteligentes).
Read moreRead less
My role
- Architecture design and technical leadership of the new generation of the platform, which replaced the previous system.
- Full-stack development: backend, offline-first PWA, white-label native apps and management dashboard.
- Infrastructure, continuous deployment, observability and quality.
- Planning, budgets and coordination of the team and collaborators, and technical relationship with clients.
TUDI
AI assistant for businesses (chat, voice and WhatsApp)
Jan 2026 - present · Alpelupe Soluciones
Role:CTO · Alpelupe
Features
Embeddable widget
Drops into any website with a simple code snippet.
Real-time phone voice
Takes forwarded calls and hands them to a person when needed.
WhatsApp
The same assistant and the same information on WhatsApp.
Summary of every call
The business knows what was said without listening to the recording.
Bookings
Links to each client's booking engine and provisional bookings that roll back if something fails.
Insights
Conversation analytics, heat maps and questions the content does not cover yet.
Tool-using agent with RAG
Answers with the business information, with a decoupled LLM provider.
Safety controls
Safeguards against hallucinations and prompt injection.
How it works
Channels
Web chat, phone and WhatsApp.
AI agent
RAG and tools over the information each business manages in its dashboard.
Actions
Answers, booking links and handover to a person.
Insights
The business sees what people ask and from where, and improves its information.
The project and my role
AI assistant for businesses that answers their customers over web chat, phone and WhatsApp with the information each business manages from its dashboard. The chat is an embeddable widget that can be added to any website with a simple code snippet. Real-time voice with handover to a person, a summary of every call and links to each client's booking engine.
Read moreRead less
The dashboard includes Insights: conversation analytics, heat maps of where queries come from, and the questions the content does not yet cover, so each business can improve its information.
In production at campsites, hotels and businesses in other sectors, such as a heavy-machinery company where it also helps prepare quotes. It is also built into Exploravia's guides.
My role
- Multi-tenant architecture design and technical leadership of the product.
- Development of the tool-using agent with RAG and a decoupled LLM provider, the real-time phone voice, the widget and the Insights dashboard.
- Deployment, observability and quality.
- Client onboarding and use as the platform for Kit Consulting projects (AI and data analytics).
Other projects
CyberSOC Pymes
SOC for SMEs with a blockchain module
Jul 2025 - Jan 2026 · ANTS Research Group
CyberSOC Pymes is a cybersecurity project developed with Inforges to bring a complete Security Operations Centre (SOC) to small and medium-sized businesses. The platform brings together SIEM, SOAR, cyber threat intelligence (CTI) sharing, ITSM and AI/ML analytics dashboards to monitor, investigate and contain incidents in real time.
Read moreRead less
It has reached TRL 8 and includes a blockchain ledger that keeps an immutable record of events and automatically validates privacy-enhancing technology (PET) policies during intelligence sharing. My main responsibility was leading the design and deployment of this blockchain module, ensuring PET policies are correctly applied and audited.
As a result, SMEs get enterprise-grade protection and comply with regulations such as GDPR and NIS2 without taking on the usual complexity of these solutions.
COBRA 2.0
Cyber range for the Joint Cyberspace Command
Jul 2023 - Jul 2025 · CyberDataLab
COBRA 2.0 is the second generation of the COBRA cyber range, developed by CyberDataLab for the Spanish Joint Cyberspace Command, a unit of the Defence Staff (Spanish Ministry of Defence). Its mission is to take the platform from TRL 4 to TRL 8-9 and turn it into a high-fidelity operational environment to train and certify military personnel in cyber-defence tactics.
Read moreRead less
Key advances
- Microservice architecture that scales complex scenarios and supports simultaneous exercises.
- DevSecOps and integrated CI pipelines to ensure quality and security across the whole lifecycle.
- Hyper-realistic, configurable APT simulation, with automatically generated challenges adapted to each participant's level.
- Advanced telemetry and dashboards with real-time performance metrics.
COBRA 2.0 gives the Armed Forces a safe environment to train, assess and refine their strategies against advanced threats, reducing risk and improving response times.
Clarixia
Founding backend collaborator
Jan 2025 - Jul 2025
Founding backend collaborator at Clarixia: I built the foundation and first versions of the backend from which the current platform evolved, and mentored the frontend team on the backend so they could keep extending it.
SCORPION
Civilian cyber range and real-time observability (master's thesis)
Jul 2023 - Jul 2025 · CyberDataLab
SCORPION is a cybersecurity training cyber range for the civilian sector (universities and companies), the civilian version of COBRA, developed at CyberDataLab, University of Murcia. It combines microservice orchestration with infrastructure as code, gamification and learning analytics.
Read moreRead less
My master's thesis (9.4/10), "Real-Time Analysis and Monitoring of Microservices Based Applications", proposes a real-time observability framework for cyber ranges and validates it on SCORPION. The goal: turn every cyber exercise into useful information.
- Real-time tracking of every command students run, to verify their progress, troubleshoot and detect suspicious behaviour or cheating.
- Learning analytics and gamification: progress, attempts and hints per student, and detection of behavioural patterns.
- Adaptive orchestration (MAPE-K loop) that adjusts the exercise to how each student performs.
- A basis for discovering, from aggregated traces, solution paths that were not anticipated when the exercise was designed.
- Technology-agnostic reference architecture: system and user telemetry unified over Kafka, implemented with Terraform, vSphere, Ansible, Fluent Bit, Loki and Grafana, with minimal performance overhead.
TuDI Studio
AI social content · technical oversight
Role:CTO · Alpelupe
Multi-tenant SaaS that creates vertical videos and images for social media aligned to each client's brand identity, from a natural-language brief.
Client websites
Client WordPress websites I run: hosting on AWS Lightsail, migrations from Cloudways and IONOS, isolated staging environments, Cloudflare, performance and security.
Cultura y Turismo Burgense
El Burgo de Osma town council
Culture and tourism website for the town (Soria): sights, activities, events calendar and visit planning.
- AWS Lightsail
- WordPress
- Divi
Camping Las Nogueras de Nerpio
Campsite and rural cottages
Website for the Nerpio campsite and rural cottages in the Sierra del Segura: accommodation, activities, groups and bookings.
- AWS Lightsail
- WordPress
- WP Rocket
Restaurante Las Nogueras de Nerpio
Campsite restaurant
Restaurant website: menu, set menus and Sierra del Segura cuisine.
- AWS Lightsail
- WordPress
- WP Rocket
Furgonetas en Murcia
Van dealership
Van catalogue for a Murcia dealership, with vehicle listings and contact forms.
- AWS Lightsail
- WordPress
- Elementor
- Cloudflare
TodoCuenca
Miles of calm
Tourism and experiences portal for the province of Cuenca. Frontend, deployment and SEO.
- React
- WordPress
- SEO
Feditur
Digital Tourism Federation
Website with an interactive map of the tourism federation associations.
- React
- Maps
Residencial Salvadora Luminosa
Guesthouse in Murcia
Website for a guesthouse in Guadalupe (Murcia): rooms, gallery and online booking.
- WordPress
- SEO
Clínica Fisio SAGA
Physiotherapy clinic
Web presence for a physiotherapy clinic.
- AWS Lightsail
- WordPress
- SEO
Camping Osuna
Campsite in Madrid
Bilingual website for Madrid's only campsite, founded in 1959: accommodation, services, events and bookings.
- IONOS
- WordPress
- Elementor
- WP Rocket
Skills
The skills behind each role and project, with where I used them.
DevSecOps
NestJS
Hyperledger Fabric
Blockchain
TypeScript
Docker
Python
WhatsApp
Grafana
Software architecture
Technical leadership
Generative AI
See all 32 skillsRead less
Full-stack development
Cybersecurity
Microservices
Observability
Quality assurance
React
WordPress
SEO
React Native
PWA
MongoDB
RAG
LLM
Qdrant
Terraform
Ansible
Kafka
Supabase
Deno
OpenAI
Education
Sep 2023 - Jun 2025
Master's in Software Engineering
University of Murcia
Master's thesis: 9.4/10. Highest honours (Matrícula de Honor) in Secure Software Design and Development.
- Quality and testing (10): unit, integration, contract, end-to-end, regression, mutation and metamorphic testing, BDD, performance and security testing; static analysis and coverage (Jest, Cypress, Stryker, SonarQube, JMeter).
- Continuous practices (9.9) and cloud (9.4): DevOps, CI/CD, containers, Kubernetes, infrastructure as code (Terraform, Ansible), serverless and monitoring on AWS.
- Data architecture (9.7): polyglot persistence with relational and NoSQL databases (document, key-value, columnar and graph), caching and data governance.
- Full-stack development (9.1): microservices, DDD, Clean Architecture, REST, GraphQL, asynchronous messaging, PWA and React Native.
- Secure software (9.2): OWASP, SSDLC and DevSecOps, risk analysis and secure coding.
- Agile management (8.5): Scrum, Lean and Kanban.
Sep 2019 - Jun 2023
Computer Engineering degree
University of Murcia
Software Engineering track. Bachelor's thesis: 9.4/10. Highest honours (Matrícula de Honor) in Programming Technology, Algorithms and Data Structures I, and Software Project Management.
- Project management (9.3, highest honours): requirements engineering, CMMI, estimation, planning, tracking, risk management and agile methods.
- Software architecture (9.1) and distributed applications (9.3): SOA and microservices, DDD, REST, asynchronous communication, Docker, Spring and .NET; persistence with JPA and MongoDB.
- Web development (9.1) and user interfaces (9.7): HTML, CSS, JavaScript, Node.js, Bootstrap and user-centred design.
- Software quality (8.3): quality standards, reviews, testing strategies and techniques, TDD and refactoring.
- Internship (9.8).
Sep 2017 - Jun 2019
Science high school
IES Alfonso X el Sabio
Grade 12.03/14.
Certifications
- Scrum Master & Agile Foundation (Expert level)Scrum Manager · Feb 2025
Credential ID: 51348Verify
- Google Project Management CertificateCoursera · Jan 2023
- Internal student · Dept. of Information and Communications EngineeringFaculty of Computer Science (UMU)
Credential ID: RUxFMuBx-xUq/xvPD-zJNXvYN5-Mxe4kVQVValidate at the UMU e-office (asks for the signature date)
- Certificate in Advanced English (C1)Cambridge English · Dec 2019
Credential ID: 500/2598/3
Honours & languages
Honourable Mention for Academic Excellence
Faculty of Computer Science, University of Murcia · Jun 2024
Winner, graphics category, Murcia Region Informatics Olympiad (OIRM19)
Faculty of Computer Science, University of Murcia (FIUM) · Jun 2019
A program built for the OIRM: in my case, a tool to plot mathematical functions.
Student Excellence Award
IES Alfonso X el Sabio · May 2019
School award for academic performance.
Runner-up award, graphics category, Murcia Region Informatics Olympiad (OIRM18)
Faculty of Computer Science, University of Murcia (FIUM) · Jun 2018
A program built for the OIRM: in my case, a tool to plot mathematical functions.
Languages
Spanish
Native or bilingual proficiency
English
Full professional proficiency (Cambridge C1)
Writing
All postsOn my Substack I write about democracy, geopolitics and technology.
14 Oct 2026 · In Spanish
Dependencia estratégica europea: la agenda pendiente
Quien construye el tablero pone las reglas. Cuatro palancas para que Europa construya y no solo regule: mercado, reglas, tecnología e industria.
4 Aug 2026 · In Spanish
Los tres peajes que Europa se niega a ver
Datos, armas y minerales: los tres peajes que Europa paga por depender de la tecnología, la defensa y la energía de Estados Unidos y China.
11 Jun 2026 · In Spanish
Dependencia estratégica europea: radiografía de un continente que sigue sin construir el tablero del siglo XXI
Segunda economía del mundo, pero sin nube, ni chips avanzados, ni plataformas propias. La infraestructura digital que sostiene Europa la controla otro.
Let's talk
If my profile fits what you are looking for, get in touch or download my CV.