Drag the coin into the slot

Let the bots in. The site unlocks. Your record does not.

Staff Security Engineer · Anti-Abuse, Account Security & Application Security

I keep bots and account thieves away from players.

Staff Security Engineer, 12+ years at Microsoft and Riot Games, focused on bot mitigation and account takeover prevention. Founding engineer of Riot's Player Security team, where I work on antibot, account security and account remediation for players across Riot's games. I also battle phishing, scalpers and social engineering.

Alberto on stage at Hackers Week 2026, University of Málaga, with the audience in front.

Quote

There is no failure, only feedback.
  • Bot protection for core account flows

    Built and deployed the protections against bots and credential stuffing on login, signup, recovery and account management, across many services and tech stacks.

  • Automated account remediation

    Led it from product discovery to launch: when an account is clearly compromised it is secured automatically, without the player waiting on a support ticket.

  • Fan-first raffles

    Built the security layer of the raffles that keep high-demand exclusives, such as booster packs and Esports tickets, in players' hands, not scalpers'.

I help teams keep bots, fraudsters and account thieves out of their products. Book a session for a focused review or a second opinion.

  • Anti-bot & account takeover review

    A review of your login, signup and recovery flows for bot and account takeover exposure, with prioritized recommendations.

  • Threat modeling session

    A guided threat model or security review of a product or feature, before it ships or while it grows.

  • Abuse strategy

    Fraud and abuse prevention for games and consumer apps: bots, scalpers, phishing and account resale.

  • Mentoring

    Career and technical mentoring for software and security engineers.

  1. 2026

    Bots, Fraud, and the Business of Breaking Games

    How attackers profit from online games, from bot farms and AI-driven automation to resale networks and phishing, and how studios balance security against player experience.

    Hackers Week 2026University of Malaga

I am working on a book. Details, a title, and a release window will land here when they are ready.

Until then, the posts section is the closest thing to a preview of what I have been thinking about.

Coming soon

From a degree in Málaga to founding engineer of Riot’s Player Security team: twelve years of building software, first for infrastructure and players, now against the bots and thieves who target them.

Study

Work

Level 01 · 2008 – 2015

University of Málaga

MSc in Computer Engineering

I studied Computer Engineering at the University of Málaga, through to an MSc.

Level 02 · 2013 – 2014

University of Oulu, Finland

Erasmus exchange, Computer Software Engineering

Midway through, an Erasmus year in Finland, studying Computer Software Engineering at the University of Oulu.

Level 03 · Jun 2014 – Oct 2017

Microsoft, Dublin

Software Engineer II, Azure DNS and Traffic Manager

In 2014 I joined Microsoft in Dublin, on Azure DNS and Azure Traffic Manager. I implemented the DNS zone and record management APIs, added TCP health checks to Traffic Manager’s health monitoring, and built a plugin framework that watches security-relevant server state across datacenters, from local administrator accounts to certificate expiry.

Level 04 · Nov 2017 – Jun 2020

Riot Games, Publishing

Software Engineer

At the end of 2017 I moved to Riot Games, still in Dublin. On Publishing I built Content Targeting, which personalises the news in the League of Legends client and mobile app. I also fixed a TCP bug in Locust, the open-source load-testing framework, that had kept it out of Riot’s internal cloud, then co-developed ALF on top of it. ALF became Riot’s standard load-testing framework for years.

Level 05 · Jun 2020 – Mar 2023

Riot Games, Commerce

Senior Software Engineer, Staff from Oct 2022

On Commerce I was feature lead on Riot’s first web store: I designed its architecture, from the content-managed storefront to a purchase pipeline integrated with Riot’s payment systems, and hardened it for production. As a Staff engineer I then built the Game Asset Platform, which extracts image assets from game builds and serves them to the web store and Riot Mobile.

Level 06 · Mar 2023 – present

Riot Games, Player Security

Staff Security Engineer, founding engineer

In 2023 I moved into security as the first engineer on Riot’s Player Security team. I built and deployed the bot protections on login, signup, recovery and account management; launched a detection that warns players about unusual logins; led automated account remediation from discovery to launch, so a clearly compromised account is secured without waiting on a support ticket; and built the security layer of the fan-first raffles that keep high-demand exclusives away from scalpers. I also lead security reviews and threat models of player-facing services, and I am bringing AI into the work: an AI-assisted review and threat-modeling process that Product Security adopted, and a weekly threat-hunting agent.

When I am not at a keyboard I am usually behind a wide-angle lens.

  1. Torii gate at the end of a tree-lined path to Meiji Shrine, Tokyo
    Tokyo, Japan
  2. Tokyo Tower framed by cherry blossoms
    Tokyo, Japan
  3. Looking out of a train window at a mountain station in Hakone
    Hakone, Japan
  4. A river running between two rows of cherry trees in bloom, Nagano
    Nagano, Japan
  5. Wooden shopfronts and cherry blossoms on an old street in Kanazawa
    Kanazawa, Japan
  6. Thatched farmhouses of Shirakawa-go in the snow, seen from above
    Shirakawa-go, Japan
  7. Old railway tracks under autumn trees in Kyoto
    Kyoto, Japan
  8. That was a sample

    See the full collection.