Portfolio

Bertrand Lorente Yañez

Security Engineer | Security Auditor | Offensive Security

Pentesting Web Security API Security Bug Bounty SysAdmin
LinkedIn INCIBE CVEs
Experience

Security Engineer — Freepik

Dec 2025 - Present · Málaga, Andalucía, España (Hybrid)
Full-time

Security Auditor — Freepik

Jun 2023 - Present · Málaga, Andalucía, España
Full-time

Security Internship — Freepik

Mar 2023 - Jun 2023 · Málaga, Andalucía, España
Internship

Junior Security Auditor — HISPASEC SISTEMAS S.L.

Mar 2021 - Jun 2021 · Málaga, Andalucía, España (Remote)
Internship
Selected Certifications
INE Security - eLearnSecurity Certified Professional Penetration Tester v3 (eCPPTv3) | ID: 107820272 | Jul 2024
INE Security - eLearnSecurity Web Application Penetration Tester (eWPT) | ID: 9720394 | Jan 2023
INE Security - eLearnSecurity Junior Penetration Tester (eJPT) | ID: 7159443 | Mar 2022
Altered Security - Introduction to Azure Penetration Testing | Aug 2022
CertiProf - Cyber Security Foundation Professional Certificate (CSFPC) | ID: 54312221 | Feb 2022
Volunteering
Volunteer - GDG Málaga (Mar 2022 - Present)
Awards
3rd Place - CTF del congreso de ciberseguridad de Andalucía (Telefónica 42 Málaga, Mar 2024)
3rd Place - CTF de Navaja Negra (Oct 2023)
3rd Place - CTF del congreso de ciberseguridad de Andalucía (Telefónica 42, Mar 2023)
CVEs
CVE-2025-1270 (CVSS 9.1) - INCIBE advisory
CVE-2025-1271 (CVSS 6.1) - INCIBE advisory
Projects

Recent projects

Ver todos
tool

Burp-MCPwn: Deep security auditing for MCP servers

Burp Suite extension unifying discovery, fuzzing, and technical analysis for MCP server security testing.
research

Physical IoT lab: technical analysis of exposed microscope streaming

Hands-on lab case on open Wi-Fi, unencrypted video, and passive interception risk in IoT deployments.