Alexander Valera

Computer engineer with 15+ years in software development and cloud platforms across aviation, retail, banking and real estate. Since 2019 I have focused on DevSecOps and cloud security: making security a built-in property of how software ships, not a gate at the end.

Today I am on the Cybersecurity Architecture team at LATAM Airlines (via Stefanini):

- I designed and built our GitLab SDLC compliance platform, in production since October 2026: findings from five scanners, repository and compliance-framework coverage, security policies and a risk-exception workflow that applies and reverts dismissals in GitLab through GraphQL. Go extractors on Cloud Run Jobs, BigQuery and FastAPI services.

- I roll out security-by-default GitLab pipelines (SAST, dependency scanning, secret detection), so every new repository is scanned from its first commit, and I drive vulnerability remediation end to end, from triage to a reviewed merge request.

- I build extractors and data models on Google Cloud (Cloud Run, BigQuery) that turn vulnerability, secrets and compliance data into posture metrics teams can act on.

- I manage privileged access as code with Terraform, and remove static credentials wherever possible (IAM database authentication, OIDC service-to-service tokens).

- I build and maintain a library of AI agents and skills (Claude Code, MCP integrations with GitLab, Jira and BigQuery) for secure coding, vulnerability remediation and platform auditing, tested against a baseline like any other software.

Before that, at Ripley (2021-2025), I ran Kubernetes (GKE/EKS) and serverless workloads on AWS and GCP with Terraform, GitOps (ArgoCD) and hardened Docker images, and executed a security roadmap with Trivy, Checkov, SonarCloud, GuardDuty and Security Command Center. At Falabella I was DevSecOps Lead for Banco Falabella and Mallplaza.

Stack: Python, Go, GitLab CI/CD, GCP, AWS, Kubernetes, Terraform, Docker, BigQuery, HashiCorp Vault, Claude Code / MCP.

I am looking for a fully remote senior role in DevSecOps, Security Engineering or Platform / Software Engineering, ideally building security platforms or AI-driven engineering tooling. Based in Chile (UTC-3), comfortable with any US time zone, open to contractor or EOR arrangements.