ErnestoDel PalacioSaiz

Incredibilis Corporation

Founder

My own software company, run alongside full-time employment since 2022. I find, pitch and close my own clients, then own requirements, architecture, development and delivery.

• Built an athlete-management platform from the ground up: multitenant SaaS, React front end, PostgreSQL schema design on Supabase, REST APIs, CI/CD pipelines and containers. Hosted and ran it myself.
• Used it in my own personal-training practice to win and retain clients, then productised it for other trainers. I onboarded and trained the users myself, handled the pushback, and supported them day to day so it stayed in use instead of stopping at launch.
• Separately hired to further develop an existing platform serving 2,500 customers and 30,000 leads: architected, built and tested a MongoDB to Supabase migration, designed to cut database cost and improve scaling. The project was cancelled before launch, so the migration never ran in production.
• That platform is where the heavier API work sits: self-built REST APIs with OpenAPI specs, an API gateway and access control, and PostgreSQL schema design with Drizzle.
• Built and run my own CRM: designed the schema, wrote the code, and use it to run my own go-to-market end to end, from target list and segmentation through to closed deal.
• Build my own LLM tooling to deliver faster: MCP servers, document retrieval and multi-step, tool-calling automation. I code with AI agents as part of how I deliver.
• Manage a small delivery team of two freelancers plus additional specialists, and have continued to deliver crisis management exercises as paid consulting since leaving Deloitte.

• 2,500customers the migration was built and tested for
• 2015writing production code since

• Founder
• Full stack
• Supabase
• Next.js
• CI/CD
• Client delivery

Omada A/S

Senior Presales Engineer

Technical lead on enterprise deals for an identity governance and administration platform, working alongside Account Executives from first discovery through to technical close.

• Own the technical side of the enterprise sales cycle: qualification, discovery, demos, workshops, and the proofs of value and pilots I scope and run end to end inside customer environments.
• Integrate via REST and SOAP APIs, including OpenAPI specs, across AWS, Azure and GCP, plus LDAP and Active Directory directory integrations, Microsoft 365 and Entra ID, Jira, ServiceNow and SAP.
• Work the identity governance domain daily: access reviews, entitlements, joiner-mover-leaver workflows, segregation of duties and least-privilege access.
• Produce the deliverables that move a deal: solution proposals, statements of work, RFx responses and technical documentation, for engineers, architects and C-level stakeholders.
• Sit between customer, sales and product as the technical voice of the customer, feeding recurring requirements back so that what is sold can actually be delivered.
• Built ChatGPT agents for RFIs, RFPs and proposals, cutting turnaround by more than 70%.
• Trained and enabled channel partners, and took formal MEDDPICC training here to qualify and prioritise.

• 40–80enterprise opportunities carried in parallel
• €50k–1MARR deal band
• 70%+cut in RFx turnaround

• Presales
• Identity governance
• REST & SOAP APIs
• AWS / Azure / GCP
• MEDDPICC
• Enterprise

GetWhy A/S

Information Security Manager

The entire security function of a SaaS product company, built from scratch, with no direct reports and everything to drive across engineering.

• Sole owner of security: cloud infrastructure security, application security and code review, vulnerability management, GRC, ISMS and risk management.
• Coordinated penetration tests and drove remediation of 12 critical vulnerabilities and misconfigurations, closing real breach exposure.
• Closed high-risk gaps across an acquired company's infrastructure during M&A integration.
• Defined a three-year security maturity strategy and a risk register, applying FAIR to quantify and prioritise, and implemented a Technical Vulnerability Management Program.
• Facilitated security assessments against ISO 27001 and NIST, reviewing controls and evidence and giving practical remediation recommendations.
• Delivered security training and broadcast company-wide security awareness updates.

• 12critical vulnerabilities remediated
• 3-yearsecurity maturity strategy defined

• AppSec
• Vulnerability management
• GRC
• ISO 27001
• NIST
• FAIR
• M&A

Januar ApS

Cyber Security Specialist & IT Operations

Second line of defence and subject-matter expert at a financial-sector payments institute, covering both security and the IT estate.

• Implemented CrowdStrike Falcon and worked hands-on with Microsoft Defender to detect and remediate real security incidents, investigating root cause and collecting evidence from affected systems.
• Internal escalation point behind an outsourced SOC, an incident response retainer and managed vulnerability scanning. Defined the requirements and scored the competing proposals in their selection.
• Used MITRE ATT&CK for threat modelling and to define the scope of penetration tests. Wrote security policies, response playbooks and contingency plans.
• Rolled out device management on Microsoft Intune across every end-user device, working through real resistance, writing the guidance and training people myself, then ran the estate afterwards: access provisioning and deprovisioning, remote support, ticketing and asset inventory.
• Main contributor to the security governance forum, where priorities were agreed with business and technical stakeholders. Ran GDPR compliance work in a regulated financial context.
• Ran two cyber exercises: an interactive tabletop and a full simulation of a major cyber incident.

• Danish FSApayments-institute licence, key contributor
• 0 → managedsecurity maturity on CMMI
• Company-wideIntune MDM rollout

• Incident response
• CrowdStrike Falcon
• Microsoft Defender
• MITRE ATT&CK
• Intune / MDM
• Regulated finance

Deloitte

Cyber Wargaming Senior Consultant

Built simulated enterprise environments and ran the crisis exercises that put client incident response teams under real pressure.

• Built fully functional simulated enterprise and SOC environments with SIEM and log analytics (Splunk, ELK, IBM QRadar) and endpoint and network security tooling (Microsoft Defender, Carbon Black, Check Point), and developed the detection rules and use cases that drove each exercise.
• Designed the attack scenarios against MITRE ATT&CK.
• Led crisis management exercises for financial and energy sector clients, scoping each one with executive and technical stakeholders and writing the findings up afterwards.
• Trained customer incident response teams to use that tooling in their own operations.
• Managed engagements end to end: scope, timelines, multiple stakeholders and internal specialists, presenting and facilitating with senior stakeholders under pressure.

• 120+cyber exercises delivered
• 100%success rate, Europe and Latin America
• Highestscore in the annual performance evaluation

• Crisis exercises
• Splunk
• ELK
• QRadar
• Detection rules
• MITRE ATT&CK
• Client-facing

Deloitte

Cyber Risk Strategy Consultant

Consulting across financial services, energy, insurance and pharma: gap analyses, corporate security strategy and operating models, with executive stakeholders.

• Led projects conducting gap analyses and defining corporate cyber security strategy with executive stakeholders.
• Assisted in operating-model assessment and target-operating-model definition for insurance-sector companies.
• Delivered security consulting for financial-sector clients: ISMS and governance, and a PCI-DSS compliance check for a customer.
• Took part in a CMMI appraisal.

• 50%faster delivery from a self-developed agile process

• Strategy
• Gap analysis
• PCI-DSS
• Target operating model
• CMMI

Accenture

Identity & Access Management Intern

First identity work: building IAM integrations on a microservices architecture, which is where the through-line to Omada starts.

• Built IAM integrations importing users, resource assignments and access contexts across large datasets using SQL, on a microservices architecture for scalable and secure identity management.
• Worked on API gateway, API governance and standards, and auth and access control on APIs.
• Handled LDAP and Active Directory directory integrations.

• IAM
• SQL
• Microservices
• API gateway
• LDAP / AD

Yoopper Global International S.L.

Full Stack Developer

Full products end to end in PHP and JavaScript: web apps with APIs, database through to UI.

• Full stack development in PHP and JavaScript, shipping complete products rather than front ends.

• PHP
• JavaScript
• Full stack

More for Less srl

Full Stack Developer

Where the production code starts: C# and .NET, full stack, 2015.

• Full stack development in C# and .NET, database through to UI.

• C#
• .NET
• Full stack