Antonio's Journey: From Security Auditor to DevSecOps

3 March 2024 Alejandro Acosta Alejandro Acosta

What was your educational and professional background before entering the Engineer Game?

I studied Physics and then completed a PhD, also in Physics. When I finished, I found myself nearly 30 years old with no useful skills for the real world. I began studying programming (at a more serious level, as I had been exposed to it during my studies but applied to Physics) and cybersecurity on my own, knowing that I needed to seek my future in this field rather than in fundamental research. I had long been interested in security, and when I learned that there are people who actually make a living from it (it wasn't as well-known then as it is now), I decided to fully focus on this path. At the same university where I studied, I got a position as a Linux systems administrator in a data center dedicated to scientific computing, of which I had been a user in previous years. Later, while continuing to self-study cybersecurity, I obtained a position as a security auditor at a consulting firm, which was the job during which I coincidentally learned about the Engineer Game program.

What originally drew you to engineering?

I have always been interested in technical subjects, although my initial orientation was towards pure science, but there I had the opportunity to program quite a bit, for various purposes, such as simulating physical processes or automating experimental systems with a computer. Gradually, as I was exposed to these applications of computing, I became more aware of their potential, compared to scientific experimentation itself, where limitations are constant, both due to the complexity of the equipment and its economic cost or maintenance, while a simple computer allows freedom only limited by the capabilities of the user. This interest in optimizing resources and processes, and in automating manual work, is one of the aspects that interests me most about engineering. At the same time, for several years I had been interested in the world of cybersecurity, so little by little I was steering myself in that direction, as I became increasingly clear that my future was not in science.

What motivated you to take your career to the next level?

After four years in my previous consulting position, and after working with several clients, I ended up feeling that I couldn't progress much further, and that the only two options I had were either to continue performing repetitive and manual tasks, enduring irrational whims of clients (in my company or in some other consulting firm, like most of my former colleagues), or to try to reach managerial positions, something that does not interest me at all. I was already considering that change of company, without any real interest, when I learned about the Engineer Game program, which made me even more aware of how my situation was not ideal, and that I could aspire to much more.

Was there a specific mentor that stood out to you?

Actually, Alejandro is the only tech mentor I have had the chance to speak with, and as I mentioned earlier, I wasn't looking for it; we coincidentally met. I had never had much confidence in the idea of mentors, as I have always prided myself on my ability to learn independently, but from the very first time I spoke with him, it became clear to me that there are many things I would not be able to learn on my own, or that would take me a lot of time, effort, and unnecessary disappointments.

Your senior colleague was Victor Galán. How did he help you throughout your experience in Engineer Game?

In addition to the interactions during class and sharing experiences from our respective interviews and processes, it was interesting to observe his evolution alongside mine, both in similarities and differences, due to the different types of jobs we aspired to. We also practiced mock negotiation and technical interview exercises together, which I believe was useful for working on the psychological aspects of these situations.

What do you think of the Engineer Game technology platform?

I think it is more than adequate; all resources are readily available at all times, and all sessions are recorded and always accessible, even those belonging to previous programs, as well as some thematic or special episodes. The platform has evolved since I completed the program, and I believe all the changes have been for the better. I really don't miss anything, aside from the constant contact with the other students and with Alejandro through a private WhatsApp group or direct contact.

How did your interview skills improve with your training in Engineer Game?

It was a turning point at all levels. If I had to highlight some aspects, I would mention a proactive attitude, knowing how to identify what companies are looking for to offer it in interviews, as well as understanding better where technological trends are heading, and knowing how to adapt to the most future-proof positions. Also, everything related to personal branding, and how to "sell myself" better in interviews, and knowing how to highlight my previous achievements in a much more convincing way. Negotiation was also an aspect that I had totally neglected before, and now I have a better idea of how far to go, what is appropriate to ask for, and how to evaluate myself more accurately in terms of salary.

What team are you in your new role?

In an application security team, responsible for various tasks related to security testing automation (DevSecOps), permission management, automation of other processes, and in general, everything related to assisting the rest of the company in terms of security for the software developed by it.

First code you implemented?

It was probably some "Hello world" :) My first steps were small programs in Fortran in my second year of college, to perform some calculations and data analysis, quite a few years ago.

Moment of greatest pride?

Possibly having achieved my current position, something I considered out of my reach just a few months ago.

Greatest mistake?

Thinking that one can "go to war alone" and that external help is not necessary to go far.

Favorite session group?

It's hard to decide on one, but perhaps everything related to mindset change, where the idea is worked on that no job (or worker) is irreplaceable, and that one should not be afraid to leave a current job simply for the security it offers in the present.

Biggest surprise about Engineer Game?

Understanding the world of work from a very different perspective, and having developed the mindset that nothing is impossible if one has the right preparation.

Is there anything else you would like to share?

I would simply like to reiterate once again that there is nothing wrong or shameful in admitting that one does not know everything, and that a small investment of time and money can lead to much greater benefits in the short term. Free options are attractive, but they are neither taken seriously nor do they contain the best information.