Mauricio Ignacio Muñoz Pizarro
Mauricio Ignacio Muñoz Pizarro

Junior Penetration Tester / Red Team Operator

Actively looking · Member since 22 Sep 2026
Location
Viña del Mar, Chile
Desired salary
Unspecified
Work preference
Hybrid
Experience level
Junior

About

Professional summary

I am an IT professional with two years of corporate technical support experience and specialized training in offensive cybersecurity. I combine hands-on infrastructure knowledge with an attacker mindset focused on identifying, validating, and reporting web and API vulnerabilities.

I hold the eWPTXv2 and eJPTv2 certifications from INE Security, along with the Google Cybersecurity Certificate. My offensive security practice includes web application penetration testing, API assessment, vulnerability research, and bug bounty activities.

I actively use platforms such as HackerOne and PortSwigger Web Security Academy to develop practical skills in SQL injection, XSS, SSRF, XXE, JWT attacks, authentication bypass, race conditions, and business logic vulnerabilities. I perform both manual and locally AI-assisted security analysis.

My technical support background includes Active Directory, Microsoft Entra ID, Windows and Linux administration, corporate endpoint deployment, hardware diagnostics, networking, SNMP monitoring, and VIP user support. I have supported more than 500 users in a demanding corporate environment.

I maintain a home lab based on Proxmox where I simulate corporate environments, build Active Directory labs, and practice offensive techniques, persistence concepts, and security testing in isolated systems. I am seeking my first opportunity as a Junior Pentester or Red Team Operator, while also being open to IT Support or Helpdesk roles that enable continued growth in offensive security.

I am available immediately for on-site, hybrid, or remote work, including rotating shifts. I am based in Viña del Mar, Chile, and communicate professionally in Spanish with intermediate English technical reading ability.

Notice period: Immediate

Skills

17 capabilities

Tech stack & tools

Working toolkit

Application Hosting

Development

Experience

Career history

Web Security Auditor and Bug Bounty Researcher Independent

I conduct active vulnerability research through HackerOne, focusing on web transaction APIs, payment flows, endpoint discovery, and web application security testing. I inspect and modify JSON payloads with Burp Suite and assess signature mechanisms and payment gateways.

I identify issues such as insecure file upload vulnerabilities, exposed .htaccess configurations, and outdated software versions. I document findings with technical evidence, impact assessments, and mitigation recommendations using tools including Burp Suite, FFUF, Nmap, Katana, httpx, curl, Python, and Nessus.

I also continuously complete PortSwigger Web Security Academy laboratories covering SQL injection, XSS, SSRF, XXE, JWT attacks, authentication bypass, race conditions, business logic flaws, and security control evasion.

IT Support Technician Freelance

I provide preventive and corrective IT support services for end users and computer equipment. My work includes operating system installation and formatting, application installation, physical equipment repair, and general maintenance.

I diagnose hardware and software issues, restore device functionality, and support users with practical technical solutions.

IT Support Technician Terminal Pacífico Sur (TPS)

I delivered on-site, remote, and telephone technical support to more than 500 users in a high-demand corporate environment. I diagnosed and repaired workstations, laptops, peripherals, HDDs, and SSDs, including component replacement and hardware verification.

I administered Active Directory and Microsoft Entra ID accounts, permissions, and groups; migrated endpoints to the corporate domain; configured user profiles; and deployed operating systems through optimized corporate Windows images. I also administered Linux and Windows Server environments, performed password recovery, and handled data backups.

I implemented monitoring for 12 mission-critical UPS units in the data center using SNMP cards and a dedicated VLAN. I prepared technical reports and provided specialized support for VIP users.

Education

Learning history

Duoc UC

Engineering in Connectivity and Networks, Computer Network Administration

Completed Engineering in Connectivity and Networks at Duoc UC in Viña del Mar, Chile. Earned the professional title of Computer Network Administrator, registration number 196331.

This professional hasn’t added portfolio projects yet.

This professional hasn’t listed any services yet.

People also viewed

All talent ›
Jobs Talent AI Tools Salaries
Menu