Open to opportunities

Daniel Yepes

@danielyepes

Message

I test web, mobile, network, and AI systems to uncover critical security risks.

Colombia

Message

What I'm looking for

I'm interested in security work involving penetration testing, red teaming, mobile and firmware reverse engineering, AI/LLM testing, fuzzing, and collaborative improvements to defensive security.

At Infobytesec (Faraday) and Cobalt.io, I perform web, API, LLM, mobile, desktop, and internal/external network penetration tests. I also support ransomware incident response and Active Directory investigations to help identify root causes of compromise.

Previously at Cipher Red Team and Fluid Attacks, I tested high-risk banking, telco, and IT environments across Colombia, Brazil, Paraguay, Panama, and the United Kingdom. My work includes red team engagements, Active Directory assessments, OWASP-based application testing, wireless assessments, phishing campaigns, code review, and physical intrusion testing.

I'm currently exploring Android internals and SoC firmware reverse engineering, including TEE, TrustZone, and ATF. I use Ghidra, IDA, r2, QEMU, Frida, AFL++, Python, and Bash, and I share security TTPs through talks and mentoring.

Experience

Work history, roles, and key accomplishments

Current

Cobalt Core Member

Current

Cobalt.io

Aug 2022 - Present (4 years)

Conducted web, mobile, desktop, and network penetration testing for various clients.

Penetration Testing

Current

Senior Security Consultant

Current

Infobytesec

Feb 2022 - Present (4 years 6 months)

Performed numerous internal/external, API/Web/LLM, and mobile penetration tests. Familiar with firmware reverse engineering, dynamic instrumentation, and fuzzing.

Ghidra IDA QEMU Frida Protobuf Active Directory Incident Response

Red Team Senior

Cipher

Nov 2020 - Jan 2022 (1 year 2 months)

Conducted mobile, web, and infrastructure pentesting for clients in multiple countries. Performed Active Directory assessments and provided technical support to business leaders.

OWASP Top 10 PCI Active Directory Red Teaming Reporting

Security Analyst

Fluid Attacks

Mar 2018 - Nov 2020 (2 years 8 months)

Conducted ethical hacking of high-risk applications and infrastructure, including red team engagements and network penetration testing. Performed code reviews and physical intrusion tests.

Ethical Hacking Red Teaming Penetration Testing Active Directory SAP Oracle Wireless Penetration SAST DAST Phishing

Student & Researcher

Universidad Pontificia Bolivariana

Jan 2017 - Mar 2018 (1 year 2 months)

Research and development assistant for the UPB Móvil project and GUACA App.

System Administrator Junior

Vertical Technologies

Jan 2016 - Dec 2016 (11 months)

Installed, provisioned, and maintained virtual servers. Managed virtualization with oVirt and Hyper-V, and automated tasks with Python and Bash scripting.