Felipe Sanchez
SStaff Security Engineer at Meridian Ops · Application security · Burp Suite, threat modeling
- Meridian Ops
- Santiago, Chile · CLT (UTC-4)
- 8+ years experience
- Universidad de los Andes
- English, Spanish
Messaging unavailable
Overview
Based in Santiago. I work on application security at Meridian Ops. Wrote the cloud security service that now handles 48 million requests a day. Cut p99 latency on the product security services from 550ms to 135ms.
Good reasons to reach out
- Working sessions on threat modeling
- Thoughtful intros to people in my field
Please don't message about
- Offshore staffing offers
- Generic networking requests
- Unpaid work or spec projects
Replies on weekday evenings
Skills
Burp Suitecloud securitySASTAppSecthreat modeling
Experience
- Staff Security EngineerSep 2022 - PresentMeridian Ops · 4 yr 1 mo · Full-time · Santiago, Chile
- Reduced cloud spend on product security by 18% in two quarters.
- Brought on-call pages for product security down from 30 a week to 4.
- Senior Security EngineerJun 2021 - Sep 2022Santander · 1 yr 3 mo · Full-time · Santiago, Chile
- Brought on-call pages for product security down from 39 a week to 3.
- Shipped 17 launches on the product security team without a rollback.
- Security EngineerApr 2020 - Jun 2021LATAM Airlines · 1 yr 2 mo · Full-time · Santiago, Chile
- Shipped a rewrite that took build times from 29 minutes to under 5.
- Security EngineerOct 2018 - Apr 2020Bancolombia · 1 yr 6 mo · Full-time · Santiago, Chile
- Wrote the cloud security service that now handles 5 million requests a day.
Projects
Side project: a budgeting app
2025Built with threat modeling and SAST. 3692 people used it last year.
Application security benchmark
2022Reproducible benchmarks comparing SAST and Burp Suite on real workloads.
References
No references yet.
Education
- Universidad de los AndesIngeniería, Computer Engineering2013 - 2017
Details
Compensation expectations
What they are targeting for their next role.
Visible to connections
Direct contact details
Direct email and a scheduling link.
Visible to connections