Pablo Pradillos

With the transfer of the access control project to Madrid, along with the arrival of a second project of similar scale, a new team was built around myself and a colleague, and I took on the role of Scrum Master of an originally 5-person team, which has since grown to 10 people. Unique cross-cutting visibility: the only current team member who has worked as a developer on both products, and the only one holding cross-functional roles across the entire team (SM and Cyber Security analyst).

Cybersecurity Analyst for the 2 legacy access control products my team is responsible for; team representative to the Security Board alongside CISO, architects and security advisors. Leads CVE triage and threat assessment. Defines the internal security baseline and leads compliance gap analysis against local security regulations (CRA, NPSA, RED...). Owns security documentation and engineering procedures for the full development lifecycle. Guided by the OWASP framework.

C/C++ Tech Lead for the MATRIX access control product line (DACH); owns the embedded client application running on field devices, which executes the access control business logic. Contributed to the combined MATRIX and BCOMM ecosystems growing from ~30% to ~50% of Dormakaba’s access control market share. My responsibilities came to include: working closely with the Product Owner, taking the lead on the most complex implementations, training new team members, and coordinating the team on new developments.