Open to opportunities

Alvaro Garcia

@alvarogarcia1

Message

I build Windows kernel drivers, reverse-engineering tools, and performance-oriented C++ systems.

Spain

Message

What I'm looking for

I'm looking to build low-level Windows systems, kernel tooling, and security research projects spanning userland, ring 0, reverse engineering, and defensive detection.

I'm building production-grade low-level Windows software, including signed kernel drivers, lock-free IPC mechanisms, PE loaders, and a custom stack-based VM.

At KPMG, I monitor, triage, investigate, and escalate security incidents using Microsoft Sentinel, Microsoft Defender, SentinelOne, log correlation, and threat-intelligence sources. I also document incidents and improve detection and response procedures.

My public projects include Km-ManualMapper, a kernel-mode DLL manual mapper, and Shared-Memory, a lock-free kernel/user-mode IPC channel built outside standard driver abstractions.

I've also reverse engineered PE droppers, game functions, and vulnerable Windows services, and I use C++23, Rust, WinAPI, WDM, IDA, x64dbg, and WinDbg across userland-to-ring-0 work.

Experience

Work history, roles, and key accomplishments

Current

Software Developer

Current

KPMG

Jan 2026 - Present (7 months)

Real-time monitoring, triage, and first-line response to security events and alerts within the SOC. Investigates and escalates incidents using SIEM and EDR platforms, and documents incidents for continuous improvement.

Microsoft Defender SentinelOne SIEM EDR Threat Intelligence