Martín Martín

Lead and continue scaling the Offensive Security unit, operating globally and reporting directly to the CISO across an organization of 11,000+ employees. - Evolving internal penetration testing, Red Team and Purple Team programs from initial build into a mature, repeatable offensive security capability. - Exploring and implementing AI-assisted techniques in offensive operations. - Uncovering critical vulnerabilities through targeted offensive engagements, directly influencing remediation priorities and measurable improvements to the organization’s security posture. - Running continuous threat simulation exercises that challenge defensive assumptions and expose gaps before real attackers find them. - Maintaining a structured feedback loop with Security Operations so offensive findings translate into improved detection and response capabilities. - Developing security talent to extend offensive coverage across a complex, globally distributed environment

Built and now lead the company’s first dedicated Offensive Security unit from the ground up, operating globally and reporting directly to the CISO across an organization of 11,000+ employees. - Designed and implemented internal penetration testing, Red Team and Purple Team programs where none previously existed, establishing the processes, methodology and tooling from scratch. - Uncovered critical vulnerabilities through targeted offensive engagements, directly influencing remediation priorities and measurable improvements to the organization’s security posture. - Drive continuous threat simulation exercises that challenge defensive assumptions and expose gaps before real attackers can exploit them. - Forged a structured feedback loop with Security Operations, ensuring offensive findings translate directly into improved detection and response capabilities. - Mentor colleagues to extend offensive security coverage across a complex, globally distributed environment.

Rapidly promoted to a senior technical role after bringing a rare combination of hands-on offensive security expertise (bug bounty hunting, penetration testing) and deep IT infrastructure knowledge to a global security team. - Served as a key technical resource during high-priority incidents, applying adversarial thinking and 14+ years of SysAdmin experience to accelerate investigation and containment. - Conducted internal penetration tests that identified critical gaps and provided actionable remediation guidance to engineering and infrastructure teams. - Laid the strategic groundwork that led to the formal creation of the Offensive Security unit, championing its value to leadership while reporting to the Security Operations Lead.

Joined as a Security Analyst within a globally distributed Security Operations team, quickly becoming a go-to resource for in-depth technical analysis and adversarial perspective. - Monitored, triaged and responded to security alerts across multiple categories in a high-volume, enterprise-scale environment. - Contributed beyond scope through threat hunting and complex security investigations, consistently applying an offensive mindset to defensive challenges.

Taught over 100 alumni during 6 different course editions and through more than 150 hours of live classes focused on Reconnaissance and Information Gathering, covering topics such as Footprinting, Fingerprinting, Vulnerability Analysis, OSINT and Dark Web OSINT / recon. Received an overall feedback score of 9.5 out of 10 from alumni evaluations.

Independent offensive security work: bug bounty hunting, freelance pentesting and offensive security consultancy. What I do: - Bug bounty hunting on HackerOne, Bugcrowd, Yogosha, Intigriti and Zerocopter. - Freelance pentesting & Offensive security consultancy, working with security firms and directly with clients. Achievements: - Reported thousands of vulnerabilities to hundreds of organizations, including Fortune 500 companies. -Helped prevent major breaches by surfacing critical flaws before they could be exploited. - Multiple CVEs to my name. Full details at: mmartin.me/cves Expertise: - Specialized in reconnaissance. Built my own methodology and automation to generate un high-value attack surface reports. - My approach consistently surfaces high-impact vulnerabilities other testers miss, even in heavily tested environments. More details about my work & research at: mmartin.me

I was responsible of ensuring that IT Operations for Spain & Portugal ran smoothly. Collaborating with a global team to ensure that standard operating procedures were consistently implemented, fostering communication and alignment across departments. - Administering Linux servers. Managing multiple technologies (Apache, Nginx, MySQL, PHP, Iptables, Fail2ban, ModSecurity, BASH/Python scripts). - Managing Windows servers, including Active Directory, SCCM, GPOs, DHCP, MSSQL, Power-Shell scripts. - Implemented and managed different virtualization technologies such as VMware, Proxmox, and VirtualBox. - Overseeing IT procurement, vendor management and IT user equipment acquisition. - Due to my cyber security knowledge, managed to complete multiple internal pentests.

I was the server and network administrator for a Spanish 500 employee company. - Administering Linux and Windows servers. - Network administrator managing various network devices including Cisco and SonicWall. - Managed to transition the company from an on-prem infrastructure to a virtualized one using Proxmox and VMWare. - Due to my cyber security knowledge, managed to complete multiple internal pentests.

My role was to provide technical assistance and support to users with hardware, software and network related issues. - Troubleshooting and resolving problems. - Installing and configuring software and hardware. - Maintaining accurate records of support activities.