Alberto Gálvez · Resume
Profile
About
Between product and cybersecurity, from design to deployment.
Full-stack software engineer and CTO at Alpelupe Soluciones. I like being close to the code: I design the architecture of our products, from the backend to the apps, and I build them.
I work with security and quality by design: I design against interfaces, not implementations, with automated testing, continuous code analysis, infrastructure as code, observability and deployments with automatic rollback.
My products are Exploravia, a multi-tenant, offline-first travel-guide platform, and TUDI, an AI assistant for chat, phone and WhatsApp. I am ultimately accountable for technology and coordinate the team and freelancers, with experience as a digitalisation provider in Kit Digital, Kit Consulting and Kit Espacios de Datos.
Before that I spent two years at CyberDataLab, University of Murcia, on COBRA, a cyber range for the Spanish Joint Cyberspace Command taken from prototype (TRL 4) to operational product (TRL 8-9), and then built the enterprise blockchain module of CyberSOC Pymes in the ANTS research group. Outside work I write about technology, geopolitics and democracy.
- Software architecture
- Full-stack development
- Applied AI
- Quality & DevSecOps
- Technical leadership
Career
Experience
From full-stack development to cyber-defense and technical leadership.
CTO · Alpelupe Soluciones S.L.
Jan 2026 - present · Águilas · hybridHands-on role: I design and build the company's products and I am ultimately accountable for everything technical.
- Exploravia: architecture and technical leadership of the new multi-tenant, offline-first travel-guide platform: web and white-label native apps from a single codebase, self-service dashboard, 360° video, audio guides, historical recreations with generative AI and augmented reality
- TUDI: AI assistant over chat (embeddable widget), real-time phone voice and WhatsApp; tool-using agent with RAG and a decoupled LLM provider, plus an Insights dashboard with analytics and heat maps
- Platform: clean architecture, infrastructure as code, CI/CD with automatic rollback, observability and continuous quality and security analysis
- Leadership: budgets, technical specifications, planning and coordination of the team and freelancers; digitalisation provider in Kit Digital, Kit Consulting and Kit Espacios de Datos
Software Engineer · Blockchain & Cybersecurity · ANTS Research Group · University of Murcia
Jul 2025 - Jan 2026 · Murcia · hybridCyberSOC Pymes (with Inforges): a full SOC for SMEs with SIEM, SOAR, CTI, ITSM and AI/ML analytics, which reached TRL 8.
- Led the design and deployment of the enterprise blockchain module
- Immutable ledger on Hyperledger Fabric that records the hash of every threat-intelligence exchange without exposing private data
- Automatic validation and auditing of privacy-enhancing policies (PET) before sharing via STIX/MISP
- Traceability and integrity for regulatory compliance (GDPR, NIS2)
Software Engineer · QA · DevSecOps · CyberDataLab · University of Murcia
Jul 2023 - Jul 2025 · Murcia · on-siteCOBRA project for the Joint Cyberspace Command (Spanish MoD): a cyber range taken from prototype (TRL 4) to operational product (TRL 8-9). Also SCORPION, its civilian version for universities and companies.
- Microservice architecture design and Python development
- DevSecOps, continuous integration, observability and real-time metrics dashboards
- Requirements, architecture and technology-selection documents
- Test plans to validate contractual requirements
- Master's thesis on real-time observability for cyber ranges, validated on SCORPION
Full-stack Web Developer · Alpelupe Soluciones S.L.
Jul 2020 - Jul 2023 · Part-timePart-time alongside my degree. Main focus on Exploravia, plus web projects for clients in very different sectors: e-commerce, law firms, tourism and more.
- React and TypeScript frontend with hexagonal architecture, RxJS, Material UI and Bootstrap
- Backend with NestJS (Node.js) and PHP Laminas MVC
- WordPress and e-commerce (WooCommerce) for private clients and initiatives such as Kit Digital, focused on performance, SEO and security
- Domains, DNS, CDN and deployments (Cloudflare, Ionos, Cloudways); accessibility and usability audits
Stack
Technologies
The tools I work with every day.
Languages
- TypeScript
- JavaScript
- Python
- PHP
Backend
- NestJS
- Node.js
- Laminas (PHP)
- Clean Architecture
- CQRS
Frontend
- React
- React Native
- RxJS
- Material UI
- Tailwind CSS
Data
- MongoDB
- Redis
- Qdrant
- Supabase / Postgres
Applied AI
- LLMs
- RAG
- Agents
- Real-time voice
Cybersecurity
- DevSecOps
- SIEM
- SOAR
- CTI
- Cyber ranges
- Hyperledger Fabric
Infrastructure
- Docker
- CI/CD
- GitLab
- Ansible
- Terraform
- Nginx
Observability
- Grafana
- Loki
- Prometheus
- SonarQube
Practices
- QA
- Test plans
- SEO
- Accessibility (WCAG)
Education
Education & certifications
Studies
Master's in Software Engineering
University of Murcia · Sep 2023 - Jun 2025
Average 9.37/10. Master's thesis 9.4. Highest honours (Matrícula de Honor) in Secure Software Design and Development. Class representative.
Computer Engineering degree
University of Murcia · Sep 2019 - Jun 2023
Software Engineering track. Average 8.29/10. Bachelor's thesis 9.4. Highest honours (Matrícula de Honor) in Programming Technology, Algorithms and Data Structures I, and Software Project Management. Undergraduate research assistant at the DIIC.
Science high school
IES Alfonso X el Sabio · Sep 2017 - Jun 2019
Grade 12.03/14.
Recognition
- Several top distinctions (programming, algorithms, project management, secure software)
- Honorary Mention for Academic Excellence
- Murcia Region Informatics Olympiad, graphics category: 1st place (2019) and runner-up award (2018)
Certifications
Internal student · Dept. of Information and Communications Engineering
Faculty of Computer Science (UMU)
Credential ID: RUxFMuBx-xUq/xvPD-zJNXvYN5-Mxe4kVQVValidate at the UMU e-office (asks for the signature date)
Certificate in Advanced English (C1)
Cambridge English · Dec 2019
Credential ID: 500/2598/3