Skip to content
View JoseGlezHerrera's full-sized avatar
  • Gran Canaria
  • 09:28 (UTC)

Highlights

  • Pro

Block or report JoseGlezHerrera

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
JoseGlezHerrera/README.md

José Carlos González Herrera

I build software — then I try to break it.

Developer (DAM) with a cybersecurity background · Canary Islands, Spain 🇮🇨

Banner

Portfolio Email


👨‍💻 About me

I write code and I attack code. Those two halves feed each other: I build with a security mindset because I know what I'd try if I were on the other side — and I audit better because I know how software actually gets built under a deadline.

  • 🍅 Running in production right now: Pedidos Merca — a system that turns free-form WhatsApp messages into printable invoices for a wholesale market stall in Gran Canaria. Used every single day, on a 1 GB VM, with 2 runtime dependencies.
  • 🔐 Security side: I've worked hands-on with Huntress (MDR), ThreatLocker (Zero Trust), Kaseya VSA, BitDefender and IT Glue during an internship at an Irish MSP in Dublin.
  • 🎓 CFGS DAM (2024–2026) and CFGM SMR (2022–2024) — both completed while working full-time.
  • 🧪 I'd rather ship one thing that survives real users than ten CRUD demos. Every project here has a story about what broke in production.
  • 🌍 Spanish (native) · English (professional) — open to remote work and relocation.

🚀 Featured work

In production · daily use

WhatsApp bot + rule-based parser for real Canarian Spanish + human review + printable invoices.

Real production data cut parser failures by 60%. Reading a library's source (not its docs) explained a session bug nobody could reproduce.

Node.js Express SQLite WPPConnect Podman Playwright

Open source · MIT

Passive security assessment tool built around six parallel modules. Reconnaissance without touching the target.

Interactive demo embedded in my portfolio site.

Python Security Async

Live

Bilingual (ES/EN) site with an animated canvas network graph, flash-free theme toggle and a live ReconForge demo.

Next.js TypeScript Tailwind v4

🍽️ Comandas Pro

Multi-tenant

Restaurant ordering system with realtime updates and per-tenant isolation.

Flutter Supabase Realtime


💻 Technologies & Tools

Languages & frameworks

Data

Infra, ops & testing

Security

Huntress ThreatLocker Kaseya VSA BitDefender IT Glue Security practice


📫 jose.gonzalezh@protonmail.com · 🌐 jose-glez.vercel.app · 📍 Gran Canaria, Spain

Pinned Loading

  1. pedidos-merca pedidos-merca Public

    App en producción que digitaliza los pedidos de WhatsApp de un puesto del mercado mayorista

  2. reconforge reconforge Public

    Automated passive security assessment tool. Scans a domain across 6 modules in parallel — subdomain enum, DNS/SPF/DMARC, SSL/TLS, security headers, WHOIS & IP reputation — and exports a PDF report.…

    JavaScript

  3. PikUp PikUp Public

    C# 1 1