20+ yearsC|CISOECSAENISAWho answers when something goes wrong
SDP Deep Tech is the engineering brand of Sky Developer Programmer. Led by Jorge González: more than twenty-five years running systems, architecture and security in environments where stopping is not an option.
Certified Chief Information Security Officer
EC-Council C|CISO certification: information security governance, strategy, risk management, programme leadership and alignment between security and business. It is the credential that evidences the ability to direct an organisation's security, not merely to execute it.
EC-Council C|CISOCertified Security Analyst
EC-Council ECSA certification: vulnerability assessment, authorised penetration testing, technical analysis, controlled validation, risk classification and remediation recommendations.
EC-Council ECSATwenty-five years in the trenches, not in the slide deck
Systems management, software architecture and IT governance in an industrial organisation, with responsibility for operational continuity, security and certified management systems. Architect and owner of a mission-critical industrial ERP/CRM running 24×7 without interruption since it went live.
CIO · CTO · Software architectGovernance and hands-on work in the same person
Information security management duties alongside technical delivery: risk analysis, authorised assessments, incident response and forensics. The person who briefs the board is the same one who reviews the firewall configuration.
Direction · ExecutionAuditor across four management systems
Internal auditor for ISO/IEC 27001, ISO 9001, ISO 14001 and ISO 22000. Accredited Data Protection Officer training and several courses completed at the Spanish National Cryptologic Centre.
ISO 27001 · 9001 · 14001 · 22000 · DPO · CCNVerifiable external recognition
Listed among ENISA's external experts in industrial cybersecurity. Accredited advisor for ACCIÓ in technology, innovation and Industry 4.0. Accredited expert in DIGITVC for value chain digitalisation across the SUDOE region, covering Spain, France and Portugal. INCIBE cyber-volunteer. Professional member of the Industrial Cybersecurity Centre.
ENISA · ACCIÓ · DIGITVC SUDOE · INCIBE · CCIUniversity teaching and train-the-trainer
Lead trainer on programmes with Universitat Rovira i Virgili covering Industry 4.0 and cybersecurity. Train-the-trainer qualification from Universitat Politècnica de Catalunya.
URV · UPCWhat we can deploy
Two capabilities a consultancy rarely has, and that a client with a live incident needs on day one.
Authorised technical assessments
Penetration testing and ethical hacking across all three modes: white box with access to code and architecture, grey box with user credentials, and black box from an external attacker's position. Always with scope and rules of engagement signed before we start. The deliverable includes a technical report, an executive report and a prioritised remediation plan.
White · grey · black box24×7 SOC with XDR and EDR
Design, deployment and operation of a security operations centre with continuous monitoring and detection across endpoints, servers, network and cloud. Deployable on the client's own infrastructure or fully managed, in any location.
Continuous monitoringIncident response and recovery
When the incident is already inside: containment, eradication, forensic analysis of what happened and coordination of the return to service. We run the technical crisis and the communication with stakeholders, including notification to the authority where required.
Contain · Forensics · ContinuityTurnkey infrastructure
Full sizing and design of IT and OT systems from scratch: communications, networks, servers, virtualisation, storage and data centres. From capacity planning and architecture to commissioning, with security built into the blueprint rather than added afterwards.
Design · Deploy · OperateFull cycle recognised by ACCIÓ
Sky Developer Programmer appears in ACCIÓ's cybersecurity directory covering all five functions of the cycle: identify, protect, detect, respond and recover. Also in INCIBE's catalogue of cybersecurity companies and solutions.
ACCIÓ · INCIBEPartner ecosystem
High-complexity projects are delivered through an ecosystem of specialist partners, national and international, selected on demonstrated capability. Technical direction, project governance and the client relationship always stay on our side. We do not publish the composition of that ecosystem.