Principal Security Engineer · Ortiz Gaming
Cofounder in the CTO/COO seat at Holoom and Holoom Entertainment. Platform security, engine systems, fullstack products and original scores for film, games and concert.
Limited availabilityselective engagements · reply within 48hI build the layers most people never see: engine systems, hardened pipelines, original scores.
Composed in silence. Shipped under load.
A T-shape gives you one deep specialty and broad surface knowledge. A comb-shape gives you deep specialty across multiple unrelated disciplines: five teeth at senior depth, one mind connecting them.
Reverse-engineer the dropper, sign the pipeline.
Scope
Evidence
Ortiz Gaming · OffSec PEN-200 · Cisco CyberOps
Evidence
Ortiz Gaming · OffSec PEN-200 · Cisco CyberOps
Render passes, native bridges, orbital propagators.
Scope
Evidence
Ashlight URP · arkhatic.com R3F · C# ↔ C++
Evidence
Ashlight URP · arkhatic.com R3F · C# ↔ C++
Sub-100ms hot paths across two databases.
Scope
Evidence
Project Sato · Go on Cloud Run · RTDB hot path
Evidence
Project Sato · Go on Cloud Run · RTDB hot path
Composition, FMOD contracts, DSP horror cues.
Scope
Evidence
Hacelo Corto award · Ashlight audio pillar · 5+ scores
Evidence
Hacelo Corto award · Ashlight audio pillar · 5+ scores
Hiring, runway, governance, the unglamorous half.
Scope
Evidence
CTO/COO · Holoom · Holoom Entertainment
Evidence
CTO/COO · Holoom · Holoom Entertainment
The handle is the same engineer. Reverse-engineers a virus in the morning, architects a high-speed bidding system in the afternoon, composes a piano score for a horror game in the evening.
03.1 · Cofounder · Software development house
Holoom is a technical consultancy and software house for organizations answering to committees, boards and auditors. Senior engineers write the code, build security into the architecture, and document governance in every delivery. Current work includes a real-time auction platform and a training platform for flight schools. Holoom also funds Holoom Entertainment's creative work.
03.2 · Cofounder · Game studio
Holoom Entertainment is a Brazilian game studio founded in 2019. Ashlight is our flagship IP, with three more titles in pre-production. Beside the games run two production fronts: an Academy that trains talent inside our own projects, and an Outsourcing division that ships game-grade assets and consultancy to other studios.
What is being built, secured, composed and studied right now.
| Status | Activity | Scope |
|---|---|---|
| securing | Gaming-terminal platform security | Ortiz Gaming |
| building | Training platform for flight schools | Holoom |
| shipping | Project Sato · real-time auction platform | Holoom |
| composing | Ashlight original score · vol. 1 | Holoom Entertainment |
| designing | Three new titles in pre-production | Holoom Entertainment |
| training | OSCP · exam preparation | Personal |
| writing | Field notes · engine + security | Arkhatic |
Every stage checks the next before handing over control, starting from code that cannot be changed. Scroll through the chain: each verified link settles one ring around the planet, from the inside out.
The first code to run lives in read-only memory, and the key it trusts is fused into the chip. Nothing below this point can be updated, so nothing below it can be replaced.
Firmware refuses to start a boot loader that is not signed by an enrolled key. An attacker with the disk still cannot get their own loader to run.
The boot loader verifies the kernel, its initial ramdisk and its command line as one signed image, so none of them can be swapped on its own.
The operating system is mounted read-only and checked block by block against a hash tree whose root travels inside the signed image. A changed byte fails the read.
Only now does the application start, and only from the verified system. If any link fails, the device halts or falls back to a known-good signed image. It never boots unverified code.
Measured, too
Alongside verification, each stage extends a TPM register with a hash of the next. Secrets sealed to those values only unlock on a device that booted exactly this chain. Separately, the TPM can sign a quote of the same values with its attestation key, which is how the device proves its state to a verifier.
After boot, updates arrive signed, certified and staged, and tamper sensors keep watching. Same rule throughout: verify before you trust.
Talk platform securitySix projects across platform security, engine systems, fullstack and composition. Each links to a Field Note where one exists, so you can see the architecture, not just the outcome.
Narrative FPS
Saladin's 1187 campaign told from the Muslim side, as the memoir a dying chronicler writes about you. Refusing to fire is a system, not a side option.
Underwater exploration · automation
A first-person descent where the factory funds the dive, depth is the story, and you write the logs the next contractor will find.
Co-op social strategy
A criminal family runs a 1920s pub that is the city's intelligence hub: serve by day, plan expeditions by night, and reshape the city for good.
Seven orbits, seven pieces. Pick a nebula to play it; the active ring's spectrum drives the swarm.
Selected: The World That Bears My Name
Deep-dives on the technical decisions behind my work: engine systems, security pipelines, audio synthesis, the occasional game design critique. Detailed enough that I could rebuild the project from them.
A device with no internet still has to take updates, and every one of them is a chance to run code nobody approved. Six ways an update can go wrong, one way it goes right, and the station on the route that catches each failure. A generic pattern, not any vendor's implementation.
selective engagements · reply within 48h
Principal security engineer at Ortiz Gaming. Offensive security, DevSecOps, strategic analysis of technical development and legal affairs.
Military and corporative training, red teaming and purple teaming, penetration testing, threat modeling, strategic consulting.
Award-winning composer by Hacelo Corto festival, in Buenos Aires, Argentina. Original score for games and independent productions.
Certifications
Cisco CyberOps, OffSec PEN-200 · OSCP in progress, Military and Civilian Comms, EW and Cyber Warfare, Unity and Unreal