PROFILE / ABOUT
I'm Matías Bataglia, a cybersecurity professional with a Bachelor's Degree in Systems (Licenciatura en Sistemas) from the Faculty of Engineering, University of Buenos Aires, and an HTB Certified Penetration Testing Specialist. I've worked in cybersecurity since 2021 after nine years in software development.
Building software taught me to understand vulnerabilities in the context of the code, architecture and controls that make them possible. Today I apply that perspective across penetration testing, application security, security engineering, vulnerability management, monitoring and observability.
On Hack The Box I combine Machines, digital forensics and incident response investigations, and technical challenges. I keep personal lab notes and publish reviewed technical notes for retired Hack The Box machines.
Current focus
Advanced web exploitation · Offensive AI security
PROFESSIONAL JOURNEY
Cybersecurity work spanning penetration testing, application security, vulnerability management, edge and network security controls, monitoring, and observability. Hands-on with WAF and reverse-proxy security, Nessus Pro, Trend Micro Vision One, Wazuh, Palo Alto Networks, and Grafana/InfluxDB/Telegraf, with Python and Rust automation for repeatable analysis and audits.
Nine years building applications with Java, Spring Boot, Spring MVC and Spring Framework, including microservice architectures. A development background spanning React and Node.js that now informs how I assess application security.
CAPABILITIES
A capability map built from the work I do across offensive testing, application security, security engineering, monitoring and automation.
Software Engineering Foundation
JavaSpring BootSpring MVCSpring FrameworkMicroservicesReactNode.js
Code, architecture and application context inform how I assess and remediate security.
01
Web & API testingDatabase testingInfrastructureActive DirectoryPrivilege escalationPivotingTechnical reporting
02
Application SecurityWeb & API securityAccess controlRemediationCode & architecture perspective
03
WAFReverse proxyFirewall policyTLSLinuxHigh availability
04
Vulnerability managementCVE validationMonitoringSIEM/XDRWindows event analysisPhishing & email analysisIncident-response support
GrafanaInfluxDBTelegrafValkey
PythonRustPowerShellBash
Kubernetes / RancherGitLabContainersCloudflare Workers
SELECTED TECHNICAL STACK
ACADEMIC BACKGROUND
ACADEMIC DEGREE · 2014 → 2021
Facultad de Ingeniería, Universidad de Buenos Aires
2024
Universidad Nacional Raúl Scalabrini Ortiz (UNSO)
2022
Universidad Tecnológica Nacional (UTN), Buenos Aires
2021
Universidad Tecnológica Nacional (UTN), Buenos Aires