ROSENDO MENDOZA rosendomendoza

🚀 Rosendo Mendoza - Python Developer | Cybersecurity & API Specialist

🔹 Python Developer | Cybersecurity Engineer at SIA (Indra Group)
🔹 Specialized in Secure API Development & Automation

🔭 I’m currently working on...

I’m currently working at SIA (Indra Group), specializing in cybersecurity solutions, API integrations, and automation. My focus is on secure software development, implementing SOAR (Security Orchestration, Automation, and Response) solutions, and enhancing threat detection through AI and cloud technologies.

🌱 I’m currently learning...

Advanced Cybersecurity Practices – Secure DevOps, API security, and cloud security.
SOAR & SIEM Integration – Splunk Phantom, IBM Resilient, and Cortex XSOAR.
Cloud Security – AWS Security Hub, GuardDuty, and IAM best practices.

👯 I’m looking to collaborate on...

Cybersecurity API development – Integrating security tools with Python.
Threat intelligence automation – Automating detection and response to cyber threats.
Cloud security projects – Enhancing AWS, Azure, and GCP security.

🤔 I’m looking for help with...

Optimizing cybersecurity automation workflows.
Implementing AI-driven threat detection models.
Exploring new SOAR strategies for incident response.

💬 Ask me about...

Secure API Development (Django, Flask, FastAPI, DRF).
Cybersecurity Integration & SOAR Workflows.
Threat Intelligence & Incident Response Automation.
Python Automation & Cloud Security.

📫 How to reach me:

📧 Email: rosendoarturomendoza@gmail.com
🌐 LinkedIn: Rosendo Mendoza
📂 GitHub: rosendomendoza

😄 Pronouns:

He/Him

⚡ Fun fact:

I started my career as a software developer but quickly became fascinated by cybersecurity, realizing that writing secure code is as crucial as writing efficient code. Now, I combine my passion for development with cybersecurity to build robust, attack-resistant applications.

🛠 Technical Expertise

Programming & Frameworks

✅ Python – Django, Flask, FastAPI, Streamlit
✅ API Security – OAuth2, JWT, API Gateway
✅ Testing – Pytest, unittest, pytest-django
✅ Database Management – PostgreSQL, MySQL, SQLAlchemy

Cybersecurity & SOAR

✅ Incident Response Automation – Splunk Phantom, IBM QRadar, Cortex XSOAR
✅ Threat Intelligence – VirusTotal API, Shodan, OpenCTI
✅ Cloud Security – AWS Security Hub, IAM, GuardDuty
✅ Vulnerability Analysis – OWASP ZAP, SonarQube

🔐 Key Projects & Contributions

Nova Rest - Secure Restaurant Management API

🔹 Tech: Python, Django, PostgreSQL, AWS
🔹 Features: API security (OAuth2, JWT), cloud storage (AWS S3), SIEM integration

Automated Threat Detection & Response

🔹 Tech: Python, Splunk Phantom, SOAR Playbooks
🔹 Features: Incident triage automation, IP blocking, phishing detection

Employment Agency Management System

🔹 Tech: Flask, MySQL, PyWhatKit (WhatsApp API)
🔹 Features: Automated candidate notifications, job application tracking

📚 Academic Background

🎓 Bachelor’s Degree in Computer Engineering – Universidad Centroccidental "Lisandro Alvarado" (1992)
🎓 Master’s in Computer Science (Networks Specialization) – Universidad Centroccidental "Lisandro Alvarado" (2010)
🎓 Degree Recognition (Spain, 2024) – Engineering & IT Technologies

🎓 Certifications & Courses

AWS Certified Solutions Architect (Associate)
Networking in the Cloud & Web Security (Universidad de los Andes, 2013)
Forensic Computing (UNAM, 2013)
Cisco CCNA 200-125
Python Mega Course (Udemy, 2023)
Cybersecurity Master Program (IMF x Deloitte - Ongoing)

🎯 Professional Experience

🔹 SIA (Indra Group) – Python Developer & Cybersecurity Engineer

📍 2024 – Present

Development & integration of cybersecurity automation solutions.
API security & authentication using JWT, OAuth2, DRF.
SOAR automation with Splunk Phantom, QRadar & Cortex XSOAR.
AWS security monitoring with GuardDuty & CloudTrail.

🔹 Deblime SRL - IT Consultant & Software Developer

📍 2019 – 2024

Designed & developed secure APIs for multiple clients.
Implemented real-time monitoring systems with Prometheus & Grafana.
Integrated third-party security services (Threat Intelligence APIs).
AWS administration, automation & security compliance.

🔹 University Lecturer (Full-Time Professor - UCLA)

📍 2007 – 2023

Taught courses in Networks, Programming & Cybersecurity.
Led R&D projects in network security & distributed systems.
Coordinated undergraduate & graduate programs.

🔹 IT Director & Software Consultant – Megatargets, C.A.

📍 1998 – 2003

Led the automation of Venezuela’s student transportation system (FONTUR project).
Managed IT infrastructure, including network security & cloud solutions.

🔹 Technical Representative – Siemens Nixdorf

📍 1993 – 1994

Installed & maintained ATMs and banking infrastructure.
Provided technical support & security audits for financial institutions.

❓ Frequently Asked Questions (FAQ)

🔹 What is your expertise in cybersecurity?

I specialize in secure software development, API security, and automation of incident response using SOAR tools. My work focuses on integrating security solutions, automating threat detection, and hardening APIs against attacks.

🔹 How do you ensure API security in your projects?

I follow best practices like OAuth2, JWT authentication, API Gateway security policies, and rate limiting. Additionally, I implement automated security testing using DAST tools (OWASP ZAP) and static analysis (SonarQube).

🔹 What SOAR technologies have you worked with?

I have experience with Splunk Phantom, Cortex XSOAR, and IBM QRadar for automating incident response workflows. I integrate these tools with Python scripts and cloud security services to improve detection and mitigation of cyber threats.

🔹 Do you have experience with DevSecOps?

Yes! I integrate security into CI/CD pipelines using GitHub Actions, SonarQube, and automated security scanning to ensure that code meets security standards before deployment.

🔹 Can I collaborate with you on a project?

Absolutely! If you have an interesting cybersecurity or software development project, feel free to reach out.

🚀 Let’s Build Secure & Scalable Solutions Together!