Hi, I’m Miguel Lameiro Martínez. I work as a Cybersecurity Technician on the External Security team at Hiberus in Madrid, and I am in the final stretch of my Computer Engineering degree at Universidad Rey Juan Carlos (URJC).
I joined Hiberus as an intern in June 2026 and stayed on the team when the internship ended in August. The work is offensive security for clients: penetration tests of web applications, security reviews of Microsoft 365 and Azure tenants, and vulnerability assessment. A good part of each engagement happens away from the exploit itself. Every finding has to be reproduced, scored with CVSS and written up with a fix the client can apply, and then explained in a meeting to people who are not security specialists.
That last step changed how I see the job. A finding is only worth something once the client understands its impact and knows how to fix it.
I wrote about what the internship taught me.
AI and security
Most of my study time now goes to AI security, from two directions.
One is attacking applications built on LLMs. Once a chatbot can call APIs, read emails or browse product pages, prompt injection becomes a way into the backend. Indirect injection, excessive agency and insecure output handling are the attack surface I have been studying most.
The other is using AI for security work: automating repetitive tasks, triaging large volumes of scanner output and writing my own tools, such as ORION-AI.
Recent certifications
Hack The Box Academy: Penetration Tester Job Role Path
28 modules covering the full penetration testing process, from reconnaissance and enumeration to Active Directory attacks, pivoting and reporting. It is the prerequisite for the HTB CPTS exam.
View achievement- PortSwigger Web Security Academy · Web LLM Attacks learning path (Sep 2026). My notes: Web LLM Attacks: Notes from the PortSwigger Learning Path.
- Anthropic Academy (Sep 2026) · verify credential
- Introduction to Model Context Protocol
- Model Context Protocol: Advanced Topics
- Claude Code in Action
- DeepLearning.AI (May 2026) · my notes are in AI Security
Outside work
I keep solving Hack The Box machines and CTF-style labs, and I build my own security tools on Linux. This blog is my technical notebook for all of it: write-ups, study notes, lessons from client work, and personal projects.
My main hub and other projects are at lameiro0x.com.