Samuel Jair González Castillo
@samueljairgonzlezcas
Pentester at Axtel who tests web apps, APIs, infrastructure, and Active Directory; OSCP+ certified and available for remote projects.
MexicoWhat I'm looking for
At Axtel, I test web applications and APIs against the OWASP Web Security Testing Guide, and document configuration errors, injections, and authorization flaws. I also assess security using OWASP Top 10 and MITRE ATT&CK.
At Deloitte México, I tested web and mobile applications and infrastructure, identifying security vulnerabilities and insecure configurations across those environments.
Alongside my formal roles, I take independent, fixed-scope penetration testing projects. I assess applications, infrastructure, and services using Black Box and White Box approaches, then document findings and mitigation recommendations for technical teams and decision-makers.
I hold the OSCP+ certification and am preparing for OSEP. I founded Pwnterrey, placed second at HackMex 2023, and spoke at CyberWeek MX 2023 about hardware as a hacking tool.
Experience
Work history, roles, and key accomplishments
Consultor Sr. CiberDefensa
Axtel
Jun 2025 - Present (1 year 4 months)
Executes security testing on web applications and API services following OWASP WSTG. Documents technical vulnerabilities and maps Active Directory with BloodHound.
Consultor independiente en pruebas de penetración
Proyectos por alcance cerrado
Mar 2022 - Present (4 years 7 months)
Conducts black box and white box penetration tests on applications, infrastructure, and services. Documents findings and provides mitigation recommendations.
Performed penetration testing on web applications, infrastructure, and mobile apps to identify security vulnerabilities and insecure configurations.
Education
Degrees, certifications, and relevant coursework
Offensive Security
OSCP+, Offensive Security
Earned the OSCP+ certification from Offensive Security in February 2025.
HackTheBox
Pro Lab Hades, Cybersecurity
Completed the Pro Lab 'Hades' from HackTheBox in January 2025.
HackTheBox
Pro Lab Zephyr, Cybersecurity
Completed the Pro Lab 'Zephyr' from HackTheBox in May 2024.
HackTheBox
Pro Lab Genesis, Cybersecurity
Completed the Pro Lab 'Genesis' from HackTheBox in January 2024.
INE Security
eCPPT, Penetration Testing
Earned the eCPPT certification from INE Security in June 2024.
Universidad Autónoma de Nuevo León
Licenciatura en Seguridad de Tecnologías de la Información, Information Technology Security
2018 - 2023
Activities and societies: Administrator of ClubCTF - UANL; active CTF competitor online and at local events.
Earned a degree in Information Technology Security from Universidad Autónoma de Nuevo León, graduating in 2023.
INE Security
eJPT, Penetration Testing
Earned the eJPT certification from INE Security in October 2022.
CertiProf
CSFP, Cybersecurity
Earned the CSFP certification from CertiProf in May 2021.
INE Security
Curso: Hacking de Redes Inalámbricas (WiFi), Wireless Security
Completed a course on Wireless Network Hacking (WiFi) in January 2021.
Availability
Location
MexicoAuthorized to work in
Salary expectations
Social media
Job categories
Interested in hiring Samuel Jair ?
You can contact Samuel Jair and 90k+ other talented remote workers on Himalayas.
Message Samuel JairGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
