University of Málaga
MSc in Computer Engineering
I studied Computer Engineering at the University of Málaga, through to an MSc.
Drag the coin into the slot
Let the bots in. The site unlocks. Your record does not.
Staff Security Engineer · Anti-Abuse, Account Security & Application Security
Staff Security Engineer, 12+ years at Microsoft and Riot Games, focused on bot mitigation and account takeover prevention. Founding engineer of Riot's Player Security team, where I work on antibot, account security and account remediation for players across Riot's games. I also battle phishing, scalpers and social engineering.

Quote
There is no failure, only feedback.
Built and deployed the protections against bots and credential stuffing on login, signup, recovery and account management, across many services and tech stacks.
Led it from product discovery to launch: when an account is clearly compromised it is secured automatically, without the player waiting on a support ticket.
Built the security layer of the raffles that keep high-demand exclusives, such as booster packs and Esports tickets, in players' hands, not scalpers'.
I help teams keep bots, fraudsters and account thieves out of their products. Book a session for a focused review or a second opinion.
A review of your login, signup and recovery flows for bot and account takeover exposure, with prioritized recommendations.
A guided threat model or security review of a product or feature, before it ships or while it grows.
Fraud and abuse prevention for games and consumer apps: bots, scalpers, phishing and account resale.
Career and technical mentoring for software and security engineers.
2026
How attackers profit from online games, from bot farms and AI-driven automation to resale networks and phishing, and how studios balance security against player experience.
Hackers Week 2026University of Malaga

· AI Ramblings
AI-accelerated development widens exposure to supply chain attacks. A tour of 2026 incidents and a defense plan mapped onto the incident response lifecycle: dependency cooldowns, package proxies, detection and containment.

· AI Ramblings
An optimistic view: AI changes software engineering work but does not eliminate engineers. Hype incentives, AI-washed layoffs, mixed productivity research, and why judgment and accountability keep skilled engineers essential.

· AI Ramblings
Around mid-2025 AI in software development went from helpful assistant to something closer to a working colleague. A look at the infrastructure that followed, and the open question of how well people learn to use these tools.

A series of React Server Components vulnerabilities, including a critical one, compared to Log4Shell. The real test is how organizations respond: dependency visibility, blast radius, ownership, and the ability to coordinate fixes.
I am working on a book. Details, a title, and a release window will land here when they are ready.
Until then, the posts section is the closest thing to a preview of what I have been thinking about.
Coming soon
From a degree in Málaga to founding engineer of Riot’s Player Security team: twelve years of building software, first for infrastructure and players, now against the bots and thieves who target them.
Study
Work
MSc in Computer Engineering
I studied Computer Engineering at the University of Málaga, through to an MSc.
Erasmus exchange, Computer Software Engineering
Midway through, an Erasmus year in Finland, studying Computer Software Engineering at the University of Oulu.
Software Engineer II, Azure DNS and Traffic Manager
In 2014 I joined Microsoft in Dublin, on Azure DNS and Azure Traffic Manager. I implemented the DNS zone and record management APIs, added TCP health checks to Traffic Manager’s health monitoring, and built a plugin framework that watches security-relevant server state across datacenters, from local administrator accounts to certificate expiry.
Software Engineer
At the end of 2017 I moved to Riot Games, still in Dublin. On Publishing I built Content Targeting, which personalises the news in the League of Legends client and mobile app. I also fixed a TCP bug in Locust, the open-source load-testing framework, that had kept it out of Riot’s internal cloud, then co-developed ALF on top of it. ALF became Riot’s standard load-testing framework for years.
Senior Software Engineer, Staff from Oct 2022
On Commerce I was feature lead on Riot’s first web store: I designed its architecture, from the content-managed storefront to a purchase pipeline integrated with Riot’s payment systems, and hardened it for production. As a Staff engineer I then built the Game Asset Platform, which extracts image assets from game builds and serves them to the web store and Riot Mobile.
Staff Security Engineer, founding engineer
In 2023 I moved into security as the first engineer on Riot’s Player Security team. I built and deployed the bot protections on login, signup, recovery and account management; launched a detection that warns players about unusual logins; led automated account remediation from discovery to launch, so a clearly compromised account is secured without waiting on a support ticket; and built the security layer of the fan-first raffles that keep high-demand exclusives away from scalpers. I also lead security reviews and threat models of player-facing services, and I am bringing AI into the work: an AI-assisted review and threat-modeling process that Product Security adopted, and a weekly threat-hunting agent.
When I am not at a keyboard I am usually behind a wide-angle lens.
That was a sample
See the full collection.