Built by operators, not auditors.

REDOPS Security is a small offensive security consultancy registered in Cyprus, EU. Senior operators only, no bench of juniors. Focused, technically deep engagements, and nothing else.

Asier Barranco

Founder and lead consultant · Head of Security at AuditOne

Six years of full-time offensive security across Spanish telecom, boutique consultancies, and international red team engagements. Four years as senior offensive security engineer at Telefónica Tech, leading penetration tests across Active Directory, web applications, cloud, mobile, and infrastructure for international clients. Today Head of Security at AuditOne, the Web3 audit aggregator, where he also audits at Expert level with a public findings record.

Specialties: modern Active Directory attack chains, EDR evasion against Sophos, CrowdStrike, and SentinelOne, custom loader development, and web application security at depth. Works in English and Spanish.

Certifications an auditor will recognize.

Hover a badge to see it in color. Each one opens its credential on credential.net. Research at blog.redghostops.com.

Field history.

  1. 2026 – present

    REDOPS Security Ltd. — Founder and lead consultant

    Red team operations, Active Directory testing, web application security, and infrastructure assessments for international clients.

  2. 2024 – present

    AuditOne GmbH, Germany — Head of Security (2026), platform auditor

    Security leadership for a Web3 audit aggregator with 500+ auditors. Pen-tests and wallet audits with public reports, including Bloom Wallet and Cybar.

  3. 2022 – 2026

    Telefónica Tech — Senior offensive security engineer

    Full-spectrum pentesting across Active Directory, web, API, cloud, mobile, IoT, wireless, and infrastructure. LLM security testing and social engineering campaigns.

  4. 2021 – 2022

    Assured Clarity Limited, UK — Offensive security instructor

    Hands-on training: penetration testing with Burp Suite, AWS security assessment, OSINT, threat modeling.

  5. 2019 – 2022

    Bullhost Cloud Services — Offensive security engineer

    Pentesting, web and API audits, vulnerability management, incident response, and SOC monitoring.

Who this is for.

  • SaaS and fintech with real attack surface and customer data to protect.
  • Regulated industries that need actual security as well as the compliance evidence.
  • Mid-market teams of 50 to 2,000 people with in-house IT or security, and boutique consultancies subcontracting senior capacity.

What this is not.

  • Scanner reports. If a Nessus license can do it, this is the wrong vendor.
  • Junior-led engagements. A senior operator does every hour of the work, and the same one from kickoff to retest.
  • Grey-zone work. Nothing runs without written authorization.

The entity.

Company
REDOPS Security Ltd.
Registration
HE 491541
Jurisdiction
Cyprus, EU. GDPR applies.
Invoicing
EUR, USD, or stablecoin

Clients across the EU, UK, USA, and Latin America; see the track record. Standard MSA and SOW in English and Spanish. NDA signed before any technical discussion. 50% at signature, 50% on delivery.

Want to talk scope?

Thirty minutes, NDA first. You talk to the operator, not a salesperson.

Book a free scoping call