Luciano Balmaceda
Senior Application Security Engineer
Barcelona, Catalonia, Spain
Summary
🤩
Rockstar🎓
Top SchoolLuciano Balmaceda is a Senior Application Security Engineer with 11 years of experience blending software development and security to build scalable, automated security programs. He has a strong track record integrating SAST/SCA/IaC tooling, creating self-service security review processes that raised adoption by 30%, and building vulnerability management and risk-tracking systems from scratch. A former Auth0 SDK contributor, he’s implemented and improved JWT/OpenID/OAuth flows across popular libraries (including fixes and pagination improvements in widely used auth0 SDKs), and has hands-on experience across backend, frontend and mobile codebases. Luciano pairs threat modeling and pentest-driven remediations with automation (Jira, Tines) to make security operational for engineering teams, and has served as the first AppSec hire to establish company-wide programs. Based in Barcelona, he combines deep implementation skills with a pragmatic focus on developer adoption and measurable security outcomes.
11 years of coding experience
12 years of employment as a software developer
Computer Software Engineering, Computer Software Engineering at Universidad Austral, Buenos AiresEngineer's degree, Computer Software Engineering, Engineer's degree, Computer Software Engineering at UADE
English
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (39)
javascript10
ios10
react-native10
python10
apidoc10
spa-template10
testing10
user-authentication10
typescript10
authentication10
rsa10
java10
android-developer10
javas10
dx10
Programming languages (16)
Github contributions (5)
auth0/java-jwt
Oct 2016 - Sep 2021
Java implementation of JSON Web Token (JWT)
Role in this project:
Back-end Developer
Back-end DeveloperContributions:16 releases, 32 reviews, 221 commits in 4 years 11 months
Contributions summary:Luciano primarily contributed to the Java implementation of JSON Web Tokens (JWT) within the `auth0/java-jwt` repository. They focused on implementing and testing the functionality to parse JWT headers and integrate public and private claims. Furthermore, the user made improvements to the project's internal structure and testing, enhancing its quality through the addition of several tests and addressing existing issues. These efforts demonstrate a focus on the core functionality and reliability of the library.
javajsonwebtokenjwtdx-sdk
auth0/auth0-python
Apr 2018 - Oct 2021
Auth0 SDK for Python
Role in this project:Back-end Developer
Back-end DeveloperContributions:22 releases, 26 reviews, 241 commits in 3 years 6 months
Contributions summary:Luciano's commits primarily focus on refactoring and updating the `auth0-python` library. They updated the codebase by renaming clients to applications across the code. Additionally, they made several updates related to pagination, including adding support for pagination in clients and connections entities. The user also added several new endpoints to manage organization member roles, covering basic CRUD operations.
authpythonsdk-pythondx-sdk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.