David T.

Computer Engineer working in Cybersecurity Architectures & Operations at Ferrovial, where I design, deploy and run the security controls that protect a large multinational environment across construction, infrastructure and concession businesses. My work sits where architecture meets the day-to-day: SOC operations and threat detection, digital forensics and incident response, XDR and SIEM engineering, vulnerability management and offensive security testing. I spend as much time building detections and tuning platforms as I do investigating what they surface. I also cover the regulatory side of the discipline: ENS, ISO 27001, NIS2, GDPR and SOX ITGC, translating control requirements into something that actually works in production, and technical findings into something a steering committee can act on.