Matías Noya
Cybersecurity & Software Development Professional |
Buenos Aires, Argentina
Contact: LinkedIn | noya.dev
Summary
Bilingual IT professional with 20+ years of experience in cybersecurity, anti-phishing, brand protection and full-stack software development. From front-line analyst to team leader in operations that dismantled 18,000+ phishing threats protecting 490+ brands across crypto, fintech, and enterprise sectors. Former Threat Resolution Specialist and Regional Team Leader at PhishFort (March 2022 – May 2026), mentoring 10+ professionals. Autodidact since the Windows 3.1 era — still building.
Experience
- PhishFort — Threat Resolution Specialist, Customer Success (Feb 2026 – May 2026): Managed and resolved escalated cybersecurity incidents for enterprise clients. Advanced technical investigation using OSINT tooling (URLScan, VirusTotal, crt.sh, dnstwist, ExifTool), DNS infrastructure analysis, WHOIS/RDAP, and forensic inspection. Coordinated takedowns with registrars, CDNs (Cloudflare, Vercel, Google), and CERTs.
- PhishFort — Regional Team Leader, Americas (Jan 2024 – Jan 2026): Led team of 4–7 security analysts covering the Americas, 500+ incidents/month 24/7. Oversaw digital identity-protection for 490+ brands. Standardized abuse-reporting workflows with 50+ entities across 10+ countries. Designed onboarding and mentorship programs for new analysts.
- PhishFort — Senior Phishing Analyst (Jan 2023 – Jan 2024): Investigated complex multi-vector threats: domain spoofing, brand impersonation, multi-stage phishing kits with anti-bot/geofencing, redirect chains. Authored SOPs, training materials, and threat-analysis playbooks adopted across the global team.
- PhishFort — Phishing Analyst (Mar 2022 – Jan 2023): Monitored, analyzed and investigated phishing and brand-abuse incidents. Technical triage of suspicious URLs: DOM analysis, HTTP headers, kit fingerprinting, sandbox verification. Processed takedown requests with registrars, ISPs, hosting providers, and CDNs.
- Portal Insumos S.R.L. — Lead Software Developer (Jan 2016 – present): Custom CRM from scratch serving 40+ daily users. Full-stack: PHP (OOP), MySQL, JavaScript, jQuery, AJAX. 9+ years continuous iteration. Zero critical outages since 2016. Maintained alongside cybersecurity roles (freelance/concurrent).
- Aggressive Lineage 2 — Founder & Lead Infrastructure Developer (Nov 2017 – Dec 2022): Gaming platform with 500+ concurrent daily players, 5+ years continuous operation. GNU/Linux infrastructure (Debian/Ubuntu), DDoS mitigation (L3/L4/L7), custom Java plugins, anti-cheat systems. (Freelance/concurrent)
- 4Fun — Co-founder (Nov 2019 – 2022): Software development collective. Game servers, web and mobile apps (CargaLibre — shipment management), hosting and game-server administration. (Freelance/concurrent)
- NickHard — SEO Analyst / Graphic Designer (Jan 2014 – Sep 2018): E-commerce platform SEO (CubeCart), product catalogs, graphic design, search-engine positioning. (Freelance/concurrent)
- Frontier — Systems Developer & IT Consultant (Jan 2013 – Jan 2016): Custom web systems and internal CRM. PHP, MySQL, JavaScript/jQuery. Local infrastructure: corporate LANs, file servers, structured cabling. Workstation administration (Windows + GNU/Linux).
- 0ne.com.ar — Webmaster (Jan 2013 – Sep 2014): Web development and hosting venture. ~10 websites sold. Stack: HTML5, CSS3, JavaScript, PHP, MySQL.
- HCDN — IT Consulting (Jan 2012 – Mar 2012): Internal network infrastructure for a legislative office in the Argentine National Congress.
- Estudio Contable Aizencher-Russo — Technical Support (2008 – 2011): IT support, network maintenance and workstation administration.
- Texgal S.A. — Administrative (2006 – 2008): Customer service, stock control and administrative support.
Skills
Cybersecurity: Anti-Phishing, Brand Protection, OSINT, Threat Intelligence, Incident Response, Vulnerability Assessment, Web Security, Digital Risk Protection, Fraud Prevention, CTI, OWASP Top 10.
Development: Java, PHP, Python, MySQL, JavaScript, jQuery, HTML5, CSS3, AJAX, REST APIs, UX/UI, Git.
Infrastructure: GNU/Linux (Arch, Debian), Proxmox, pfSense, Microsoft Azure, Google Cloud, Docker, TCP/IP, Networking.
Tools: Urlscan, Burp Suite, Metasploit, Nmap, Wireshark, WHOIS, dnsrecon, dnstwist, Gobuster, WPScan, Exiftool, Shodan, Censys.
Soft Skills: Team Leadership, Stakeholder Management, Negotiation, Customer Success, Effective Communication, Emotional Intelligence, Community Management, Mentoring.
Education & Certifications
UNLaM — Computer Science Engineering (entrance exam passed, 2022). Educación IT — Multiple certifications: PHP OOP, Java, SQL, UX, Web Security (SQL Injection & XSS), API Web Services, jQuery, HTML5/CSS3 (2011–2016). A.U.B.A. Programmers Club — "Learning to program with Java" (2005). Self-taught since ~1995: Web Design, GNU/Linux, Networks, Information Security.
Languages: Spanish (native) · English (professional, daily use).
Recognition
ESET Acknowledgment — June 2020: Recognized by ESET for responsible disclosure of a security vulnerability (parameter tampering) affecting the ESET website.