Introduction

Hi, I'm Enrique!

I hold a BSc in Computer Science and have a deep passion for technology, particularly cybersecurity. I'm a naturally curious person and a hacker at heart, with extensive experience in web application penetration testing, including a Burp Suite Certified Practitioner (BSCP) certification. My expertise also extends to Android security, digital forensics, internal network security, and other areas of offensive security.

Beyond cybersecurity, I have a strong passion for software engineering and Android. I built two apps called KeyStar and PenStar that let you completely customize the buttons on your Android devices. I'm always eager to explore new technologies, understand how things work, and find creative ways to improve or break them.

I love to code, automate, and build things that make life easier. Over the years, I've developed and maintained an extensive home lab, managing my own infrastructure and services. I've also written hundreds of custom scripts and applications for my devices and infrastructure, constantly refining how everything works together.

I am meticulous, which has its advantages and disadvantages. I verify information from multiple sources, keep detailed documentation, and am always looking for better ways of doing things. I take time to understand and customize the tools I use, and my ability to spot patterns helps me quickly develop new skills and operate at high levels of efficiency.

Have a look at my résumé and message me on LinkedIn if you'd like to connect. My OpenPGP certificate is also available.

Services

  • Cybersecurity icon

    Cybersecurity

    Penetration testing, vulnerability assessments, and consultation.

  • Web development icon

    Software Engineering

    Android applications, backend development, and infrastructure.

Résumé

Awards

  1. Code.Sprint National Programming Competition

    2020

    Achieved first place in the 2020 edition of Malta's national programming competition. The competition involved developing commercial Java applications under strict time constraints.
    View Award

Certifications

  1. Burp Suite Certified Practitioner

    2025

    The BSCP covers web application security testing skills using Burp Suite. It demonstrates the ability to detect, exploit, and report a wide range of vulnerabilities in real-world scenarios.
    View Certification

  2. Cisco Certified Network Associate

    2022

    The CCNA covers the fundamentals of networking, including topics such as IP connectivity, network access, security fundamentals, automation, and troubleshooting.
    View Certification

  3. CompTIA Security+

    2022

    The Security+ covers the skills necessary to perform core security functions, including topics such as network security, compliance, identity management, threats, and risk mitigation.
    View Certification

Education

  1. University of Malta: BSc in Computing Science

    2020 — 2023

    My thesis, "Memory Forensics of Android Backdooring Based on App Virtualization", focused on developing an Android-based tool to detect and extract virtualized app code from memory for malware analysis.

    View Thesis

Experience

  1. Independent: Android Developer

    2024 — Present

    • KeyStar: Map the hardware and software buttons of your Android device.

    • PenStar: Map S Pen buttons and Air Actions gestures to any action for any app.

    View Website
  2. Kyte Global: Offensive Cybersecurity Consultant

    2025 — Present

    • Performed various web, mobile, internal, external, and cloud penetration testing engagements.

    • Documented vulnerabilities with clear remediation steps through detailed reports.

    • Advised clients on security risks and remediation, translating technical issues into business impact.

  3. PwC Malta: Offensive Cybersecurity Consultant

    2021 — 2025

    • Reduced a week-long data collection and reporting process to just under one hour by fully automating the complex workflow.

    • Built and operationalized a leaked credentials database after sourcing dozens of terabytes of leaked data. Using efficient code to process the data and a graphical application to facilitate lookup, our red teaming capabilities were significantly improved.

    • Established the team's structure and methodology for web penetration testing by mastering Burp Suite, integrating external tools, documenting vulnerability classes, and creating checklists to aid during engagements.

    • Increased efficiency across the team by standardizing our lab environment, including device configuration, access protocols, networking, and credential management. Additionally, I implemented customized scripts and shortcuts tailored to our internal needs, reducing context-switching and downtime.

    • Improved the security posture of in-house software by conducting internal penetration tests and advising the development team on secure coding practices and design improvements.

    • Automated administrative tasks across multiple teams, such as reporting, data analysis, and web scraping. These initiatives saved significant time and reduced costs across the firm.

Blog

Contact

Contact Form