Assessment
Manual assessments · Vulnerability analysis · Source code audits · Threat modeling
security assessment / reverse engineering / cryptography / ai security
Sergio Benlloch
R&D Security Engineer
Computer engineer working as an R&D Security Engineer on practical security assessment, reverse engineering, cryptography, AI security, and robust mitigation work with engineering teams.
Computer engineer. Security research, reversing, cryptography, AI security. ITI - Instituto Tecnológico de Informática
sergio@secbox:~$ uname -srmo
Linux 6.x x86_64 GNU/Linux
sergio@secbox:~$ id
uid=1000(security-researcher) groups=pentest,reversing,crypto
sergio@secbox:~$ cat ~/.profile
Valencia, Spain / Europe
contact=use --mail flag
sergio@secbox:~$ ./focus --now
- manual security assessments
- firmware and ARM/x86 reversing
- post-quantum cryptography and AI security
- privacy-enhancing tech: HE, TEEs, DP, MPC
- cryptography and secure engineering
sergio@secbox:~$ alias sudo='please'
please still won't fix race conditions, but morale improves.
02 / capability map
Technical surface
Reverse Engineering
Executable triage · ARM/x86 · Firmware analysis · PoC development
Cryptography
Applied cryptography · Protocol review · Post-quantum cryptography · Secure implementations
AI Security
Threat modeling · Misuse analysis · Secure ML pipelines · Adversarial review
Privacy Tech
Homomorphic encryption · TEEs · Differential privacy · MPC
Engineering
Python · Go · C · Java · Bash · Linux · Automation
04 / field record
Experience and operating context
June 2023 - Present
R&D Security Engineer
ITI - Instituto Tecnológico de Informática · Valencia, Spain (Hybrid)
- Work on security research and security engineering tasks with practical assessment and delivery constraints.
- Focus areas include PETs, cryptography, AI security, DevSecOps and mitigation work that engineering teams can implement.
- Operate across research, prototyping, review and technical communication depending on the problem surface.
December 2021 - January 2023
Offensive Security Researcher
Cyber Intelligence S.L. · Valencia, Spain
- Worked in security research using Python and Bash with a strong practical bias.
- Reviewed binaries and low-level artifacts as part of security assessment work.
- Built and adapted internal tooling to speed up repetitive analyst workflows.
05 / research outputs
Selected writing and papers
Threat Modeling for Enhancing Security of IoT Audio Classification Devices
Threat modeling and security architecture for microphone-equipped IoT nodes using remote attestation, mutually authenticated TLS, post-quantum resilience and secure update handling.
Master's thesis: binary file intelligence
Automated binary characterization and machine-learning modeling for executable files, framed as a cyberintelligence support layer rather than a replacement for manual analysis.
Binary multi-objective design-space exploration
Design-space exploration for GCC compilation flags to balance executable size, execution time, CPU and memory use and binary robustness.
06 / selected work
Projects as evidence
go-diffie
A Go implementation and learning project around Diffie-Hellman style secret exchange.
intfact
Go implementations of integer factorization algorithms for decomposing composite numbers into prime components.
BinSniff
Characteristic extractor for binaries, focused on PE and ELF parsing workflows.
devAV
Toolkit for machine learning-based malware detectors: data mining, feature extraction, model selection, and prototype deployment.
07 / field notes
Practical notes
Copy Fail and Dirty Frag: writing where you could only read
A practical note on Copy Fail, Dirty Frag, and why page-cache writes are a dangerous boundary failure in the Linux kernel.
Paper: threat modeling for audio-classifying IoT devices
A note on the paper about securing microphone-equipped IoT nodes, audio classification, firmware, data handling, and communications.
08 / foundation
Academic base
Issued April 2026
Criptografía matemáticamente demostrable
Universitat Politècnica de València (UPV)
Credential ID FCP1SYW4LJL. Public LinkedIn certification entry for mathematically demonstrable cryptography.
September 2021 - June 2023
Master's in Cybersecurity and Cyberintelligence (MUCC)
Universitat Politècnica de València (UPV)
Focused on protecting information and communication systems through vulnerability analysis, secure development and threat intelligence generation.
2017 - 2021
Bachelor's in Computer Engineering
Universitat Politècnica de València (UPV)
Focused on software engineering, system architecture and low-level programming foundations.