Global Strategy¡Bienvenidos a Estrategia, el podcast de Global Strategy! En este episodio Bernardo Rodríguez nos explica su trayectoria formativa y profesional para trabajar en el ámbito de la ciberseguridad. Aunque a primera vista puede parecer un sector limitado a carreras de Ingeniería o Ciencias Exactas, la experiencia de Bernardo demuestra que es posible acceder al mercado laboral de la ciberseguridad desde carreras de Ciencias Sociales. Bernardo Rodríguez es Lead SOC Shift en Swiss Post.
El podcast se encuentra disponible en el canal de Global Strategy en iVoox, iTunes, Spotify, Google Podcast, Anchor y YouTube. Puedes seguirnos suscribiéndote en cualquiera de esas plataformas y a través de nuestras cuentas en X, Facebook, Instagram y Telegram. Te agradecemos que nos ayudes a ganar en visibilidad dando al Me gusta o recomendando el podcast a tus amigos.
Recursos adicionales:
1. Plataformas para aprender
– CTFs
– HackTheBox: https://www.hackthebox.com/
– TryHackMe: https://tryhackme.com/
– Overthewire: https://overthewire.org/wargames/
– CyberDefenders: https://cyberdefenders.org/
– Security Blue Team: https://www.securityblue.team/
– eCTHP Certification: https://security.ine.com/certifications/ecthp-certification/
– TCM Security: https://academy.tcm-sec.com/courses/
– picoCTF: https://picoctf.com/
– PortSwigger – Web Security Academy: https://portswigger.net/web-security
– eJPT: https://security.ine.com/certifications/ejpt-certification/
– SANS: https://www.sans.org/cyber-security-courses/advanced-incident-response-threat-hunting-training/
– https://www.incibe.es/aprendeciberseguridad
– Curso de Especialización en Ciberseguridad en Entornos de las Tecnologías de la Información: https://www.juntadeandalucia.es/educacion/portals/web/formacion-profesional-andaluza/fp-grado-medio/detalle-titulo?idTitulo=981
– Curso Especialista en Ciberseguridad. Programa PICE – Garantía Juvenil: https://empleoymovilidad.es/cms.php?seccion=Cursos
– Máster en Ciberinteligencia: https://www.campusciberseguridad.com/masters/master-en-ciberinteligencia
2. Certificaciones de SIEMs para “blueteamers”
– Microsoft SC-200: Mitigate threats using Microsoft Defender XDR: https://learn.microsoft.com/en-us/training/paths/sc-200-mitigate-threats-using-microsoft-365-defender/
– Splunk Core Certified Power User: https://www.splunk.com/en_us/training/certification-track/splunk-core-certified-power-user.html
– Elastic Certified Analyst Exam: https://www.elastic.co/training/elastic-certified-analyst-exam
3. Conferencias
3.1 Madrid
– RootedCON (Madrid, Valencia, Lisboa, Malaga)
– Jornadas CCN-CERT (Madrid, España)
– C1b3rwall (Avila)
– Osintomatico (Madrid)
– Criptored Talks
– h-c0n – HackPlayers
– Jornadas CCN-CERT & MCCE (Madrid)
– C1B3RTR4KCS
3.2 Resto de España
– Navaja Negra (Albacete, España)
– Cybersecurity Summer Bootcamp (León, España)
– Barcelona Cybersecurity Congress (Barcelona, España)
– BSides (Barcelona, España)
– MorcillaCONF (Burgos, España)
– HoneyCON (Guadalajara, Madrid)
– Mundo Hacker (Madrid, España)
– No cON Name (Barcelona, España)
3.3 Andalucia
– Cascamorrascon (Baza, España)
– Congreso de Ciberseguridad UGR-INCIBE (Granada)
– Hackén (Jaen)
– UAD360 (Malaga)
– BSides Málaga
– Congreso de Ciberseguridad de Andalucia
– HACKADEMICS-FORUM (Cordoba)
– SecAdmin (Sevilla)
3.4 America Latina
– DragonJARCON (Centro Empresarial Manizales, Colombia)
3.5 Resto del mundo
– https://wiki.securiters.com/securiters-wiki/congresos-de-ciberseguridad
– Elastic
– Blackhat
– Defcon
– RSA Conference (San Francisco)
– OffensiveCON (Berlin)
– Insomnihack: https://insomnihack.ch/
– Black Alps: https://www.blackalps.ch/ba/
4. Webcasts
– SANS
– Flare
– Mandiant:
– Sandworm Revealed: A Deep Dive into APT44: https://www.brighttalk.com/webcast/7451/613141
5. Empresas
Deloitte
Accenture
Tarlogic
S21Sec
Movistar (Telefónica Tech), Orange, Vodafone, etc.
Entelgy
Counter Craft
S2 Grupo: https://s2grupo.es/
BLueliv
Panda
AlienVault
Irius Risk
Electronic IDentification
https://www.nttdata.com/global/en
https://www.hackbysecurity.com
Palo Alto Networks
Fortinet
Check Point Software Technologies
Cisco Systems
Kaspersky Lab
https://www.crowdstrike.com/en-us
6. Fuentes varias de formacion autodidacta
– The Cyber Mentor – Ethical Hacking in 12 Hours – Full Course – Learn to Hack!: https://www.youtube.com/watch?v=fNzpcB7ODxQ
– https://www.youtube.com/watch?v=qwA6MmbeGNo
– https://www.youtube.com/watch?v=OCjh8AULc8Y
– https://www.youtube.com/watch?v=htez3rhhPO8
– NetworkChuck – the hacker’s roadmap (how to get started in IT in 2023): https://www.youtube.com/watch?v=uTAaFExLgwQ
– NetworkChuck – the hacker’s roadmap (how to get started in IT in 2025): https://www.youtube.com/watch?v=5xWnmUEi1Qw
– The Bearded I.T. Dad – How to Get Started in Cybersecurity in 2025: https://www.youtube.com/watch?v=FaKPvWIWC1s
– CyberFlow – How to Learn Hacking (2025) – a Practical Guide: https://www.youtube.com/watch?v=iCbOV8p6tD4
– Cybersecurity jobs available right now: March 25, 2025: https://www.helpnetsecurity.com/2025/03/25/cybersecurity-jobs-available-right-now-march-25-2025/
7. Fuentes para las noticias
Principales vendedores de products de antivirus y los CERTs de Estados con una alta madurez
Recomendar Feedly y las RSS de las principales paginas:
– https://www.bitdefender.com/en-us/blog/
– https://www.bleepingcomputer.com/
– https://www.imperva.com/blog/
– https://www.cisecurity.org/insights/blog
– https://www.tripwire.com/state-of-security
– https://www.cert.ssi.gouv.fr/avis/
– https://blog.checkpoint.com/security/
– https://blogs.cisco.com/security
– https://www.mcafee.com/blogs/
– https://www.virusbulletin.com/virusbulletin/
– https://www.bellingcat.com/
– https://blog.talosintelligence.com/
– https://www.darkreading.com/
– https://www.elastic.co/security-labs/
– https://hackread.com/
– https://www.group-ib.com/blog
– https://www.infosecurity-magazine.com/news/
– https://intezer.com/blog/
– https://www.kaspersky.com/blog/
– https://krebsonsecurity.com/
– https://www.helpnetsecurity.com/
– https://heimdalsecurity.com/blog/
– https://www.malwarebytes.com/blog/
– https://www.microsoft.com/en-us/security/blog/
– https://www.netscout.com/blog/
– https://www.paloaltonetworks.com/blog/
– https://portswigger.net/research/
– https://posts.specterops.io/
– https://www.proofpoint.com/us/newsroom/press-releases/
– https://www.rapid7.com/blog/post/
– https://www.cybersecurityintelligence.com/blog/
– https://www.sans.org/blog/
– horizon3.ai
– huntress blog
– cyberscroop
– cyber Security news
– Cyfirma press releases
– ANHSeclab
– Fox-IT International Blog
– Mandian Intelligence
– Naked Security
– NCSC Report
– Qualys
– Recorded Future
– SafeBreach
– Schneier on Security
– Securelist
– Seucirty Affairs
– Security Research – Intezer
– Security Weekly
– SecurityWeek
– Sekoia.io Blog
– Silicon
– Softpedia NEws
– SpiderLabs Blog from Trustwave
– Tenable Blog
– The CyberWire
– The DFIR Report
– The Record from Recorded Future
– The Register – Security
– Threat Intelligence on Medium
– Threat Connect
– Threatpost
– Trend Micro Researh
– Unit 42
– Virus Total Blog
– WeLiveSecurity
– AlienVault blog
– AWS Security Blog
– AnyRUN’s Cybersecurity Blog
– CrowdStrike Blog
– https://www.security.com/threat-intelligence
– https://www.kelacyber.com/resources/research/
– https://hstechdocs.helpsystems.com/manuals/cobaltstrike/current/userguide/content/topics/blog_main.htm
– https://darkatlas.io/blog
– https://blogs.jpcert.or.jp/en/
– https://cert.gov.ua/articles
8. Miscelánea: Cultura, Series y películas
– Mr. Robot (2015)
– Zero-Day (2025)
– Person of interest (2011-2016)
– Matrix (1999-2021)
– Blackhat (2015)
– The Fifth Estate (2013)
– Black Mirror (2011-2019)
– Hackers (1995)
– WarGames (1983)
– The Girl with the Dragon Tattoo (2009 – 2018)
Javier Mª Ruiz Arévalo
Samuel Morales