Lorena Nunez
SVP of Engineering at Orbit Commerce · Application security · SAST, threat modeling
- Orbit Commerce
- Santiago, Chile · CLT (UTC-4)
- 16+ years experience
- Universidad de Buenos Aires
- English, Spanish
Messaging unavailable
Overview
I've spent 26 years on application security - first at Banco do Brasil, now at Orbit Commerce. Built the experimentation framework 8 product teams use to ship changes safely. Before that: Santander and Google. Most at home with Burp Suite and AppSec. I volunteer with a food bank on weekends.
Good reasons to reach out
- Working sessions on threat modeling
- Speaking or podcast invitations
Please don't message about
- Requests to fix your code for free
- Agency or outsourcing pitches
Replies between meetings, usually same day
Skills
AppSecthreat modelingSASTBurp SuiteOWASP
Experience
- VP of EngineeringApr 2024 - PresentOrbit Commerce · 2 yr 6 mo · Full-time · Santiago, Chile
- Brought on-call pages for product security down from 13 a week to 4.
- Mentored 4 engineers through their first promotion.
- Staff Security EngineerDec 2020 - Apr 2024Santander · 3 yr 4 mo · Full-time · Santiago, Chile
- Cut p99 latency on the product security services from 838ms to 97ms.
- Wrote the Burp Suite service that now handles 12 million requests a day.
- Security EngineerJun 2018 - Dec 2020Google · 2 yr 6 mo · Full-time · Santiago, Chile
- Cut p99 latency on the product security services from 624ms to 141ms.
- Security EngineerNov 2014 - Mar 2018iFood · 3 yr 4 mo · Full-time · Santiago, Chile
- Reduced cloud spend on product security by 18% in two quarters.
- Principal EngineerMar 2011 - Nov 2014Banco do Brasil · 3 yr 8 mo · Contract · Santiago, Chile
- Previously an operator for 5 years before investing.
- Led or co-led 34 investments, 9 of them now at Series B or later.
References
No references yet.
Education
- Universidad de Buenos AiresLicenciatura, Information Technology1996 - 2000
Details
Compensation expectations
What they are targeting for their next role.
Visible to connections
Direct contact details
Direct email and a scheduling link.
Visible to connections