Andrés Maroto

Andrés leads Thoropass' global penetration testing practice, a worldwide team of full time ethical hackers. Under his leadership, the team has produced over 1,000 pentest reports across web, mobile, API, LLM, desktop, network, and social engineering engagements, establishing pentesting as one of the fastest growing service lines at Thoropass.

Andrés is an ethical hacker at heart, focused on testing web applications, APIs, mobile apps, and AI powered systems to find bugs and holes before cybercriminals do. He joined Thoropass as its first penetration tester and scaled the practice into the global team it is today, building the processes, QA frameworks, and quality standards that the team runs on. What sets Andrés apart is his ability to bridge the technical and business worlds, while making sure the technical depth clients expect is never lost. Naturally curious, he is always investigating what's new in the security world to bring the latest techniques and tooling into the team's offensive security engagements.

Andrés' career spans more than a decade in technology and eight years dedicated to offensive security. Before Thoropass, he performed penetration tests for large international clients at 7ASecurity, served as a pentest advisor at Infinite Computer Solutions, where he also trained over 120 developers in secure coding, and spent more than five years at Fiserv, where he grew from ethical hacker to Systems Security Tech Lead in the financial services space.

Andrés holds a degree from Tecnológico de Costa Rica and industry certifications including Burp Suite Certified Practitioner (BSCP), HTB Certified Web Exploitation Specialist (CWES), Certified AppSec Pentesting eXpert (CAPenX), Practical Web Pentest Professional (PWPP), Certified AI/ML Pentester, and API Security Certified Professional. He is based in San José, Costa Rica.

‍