José A. Guasch

About José A. Guasch

Jose A. Guasch is a security professional with ~20 years of experience, currently working as Principal TRUST Manager at Microsoft (Viva Engage). TRUST = Security + Privacy + Compliance + Responsible AIPreviously he worked as a manager of the “Tiger Team” in a Spanish security consulting firm. His specialties are Ethical Hacking, Pentesting, Forensics, Systems, Cloud and WebApp Security, Compliance and Responsible AI.Speaker at Rooted CON 2012 (Madrid) and Hack In The Box 2015 (Amsterdam)Personal interviews at media:+[El Lado del Mal] Informática] https://estacioninformatica.blogspot.com/2013/09/un-minuto-sin-010101-con-jose-antonio.htmlResearch-related interviews/posts:+[Forbes] VICE] http://motherboard.vice.com/read/heres-a-map-of-hackable-smart-parking-garages+[XATAKA] Blog] https://blog.rootshell.be/2015/05/29/hitb-amsterdam-wrap-up-day-2-2/+[Security Affairs] http://securityaffairs.co/wordpress/37387/hacking/parking-management-system-hack.html

Experience

1. Principal Trust Manager

   Microsoft

   Jan 2025 — Present · Redmond, WA, US

   Division: Experiences + Devices - Viva Engage Team = Security + Privacy + Compliance + Responsible AIAs the Principal Trust Manager at Viva Engage, I lead efforts in Security, Privacy, Compliance, and Responsible AI. My role involves building and developing a team of engineers focused on trust, fostering a strong culture of security, privacy, and compliance within the team.I am responsible for strategic planning and decision-making, partnering with key stakeholders to outline the vision and strategy for evolving the trust posture of Viva Engage. I also evangelize trust practices across engineering and product teams, ensuring that security, privacy, and compliance guidelines are integrated into our development processes.Operational oversight is a key part of my role, where I oversee efforts in security engineering, privacy, and compliance to enable our engineering teams to deliver large-scale features and experiences. I drive planning and analysis for incident management and audits, creating a culture of service excellence.Collaboration with internal customers is crucial to my role, ensuring that trust practices are communicated and implemented effectively. This includes managing privacy reviews, security assessments, and compliance consultations.Additionally, I lead efforts to ensure that AI technologies within Viva Engage adhere to responsible AI principles, maintaining high standards of ethical AI usage. My role is critical in maintaining a robust trust framework, enabling Viva Engage to deliver secure, private, and compliant solutions while fostering a culture of trust and responsibility.

Education

• Universidad Politécnica de Madrid

  Bachelor's degree, Computer Engineering

  2001 — 2007

Skills

• Microsoft Azure
• Internet Security
• Pre-Sales
• Puppet
• Vault
• Infrastructure
• Web Application Security
• Azure
• Computer Forensics
• Apache Mesos
• Web Applications
• Pci Dss
• Elasticsearch
• Vulnerability Management
• Information Security
• Ids
• Databases
• Antivirus
• Go
• Owasp
• Ceh
• Open Source
• Git
• Siem
• Network Security
• Web Development
• IT Audit
• Consulting
• Keyvault
• Firewalls
• Php
• Computer Security
• Security Policy
• Security
• Docker
• Iso 27001
• Application Security
• Oms
• Linux
• Networking