Why this persona fits the audience
Works at an 8-person Barcelona startup shipping a web app with an AI summarizer and containerized backend jobs. She handles her own security checks with Dependabot, Trivy, and a shared spreadsheet, and the team discusses findings during weekly release reviews without a dedicated security owner.
- Age: 31
- Location: Barcelona, Spain
- Occupation: Product Engineer
- Income: €54,000/year
- Education: B.Sc. in Software Engineering
- Company size: 8 employees
- Years in role: 2.5
“I don't just want to build things that work; I want to build things that stay working when the world gets noisy and the stakes get high.”
Conchita Gastélum Estévez is a 31-year-old Product Engineer living in the vibrant, artistic district of Gràcia in Barcelona. Holding a B.Sc. in Software Engineering, she entered the workforce with a keen interest in how software scales and secures itself in the wild. Currently, she anchors the engineering efforts at an eight-person startup developing a web application featuring an AI summarizer and containerized backend jobs. In this lean environment, she has evolved into a de facto security champion, navigating the complexities of modern development without the backing of a dedicated security team. Her toolkit is a testament to her resourcefulness: she relies on the ubiquity of open-source solutions like Dependabot for dependency management and Trivy for container scanning, orchestrating these disparate signals through a meticulously kept shared spreadsheet. This manual correlation process is her daily reality, requiring intense focus during weekly release reviews where the entire team scrutinizes potential risks. Conchita's professional identity is defined by a unique blend of ownership and pragmatism; she takes pride in the fact that she can identify a vulnerability in a third-party library and patch it before it reaches production, all while maintaining the velocity required by a startup. However, this autonomy comes with a significant cognitive burden. She constantly weighs the trade-off between shipping new features and ensuring the underlying infrastructure remains resilient against evolving threats. Her income of €54,000 reflects her seniority within the small team but also highlights the financial constraints that prevent her from purchasing enterprise-grade security suites. Instead, she invests her time in learning and adapting free tools, driven by a belief that security should be accessible and integrated into the developer experience, not a bottleneck. Whether she is debugging a race condition in a container or mentoring a junior developer on secure coding practices, Conchita approaches every challenge with a mindset of continuous improvement and a deep respect for the power of simple, well-engineered systems.
Background & daily life
A day in their life
Conchita wakes up at 6:30 AM, brewing coffee and checking her bike route to avoid traffic. By 8:00 AM, she's at her desk, reviewing the overnight logs and the latest Dependabot pull requests. The morning is spent in deep focus, refactoring a legacy module and ensuring the new AI summarizer endpoint doesn't leak sensitive data. Lunch is a quick salad eaten at a nearby park, followed by a sprint planning session where she negotiates timeline trade-offs with the product manager. Afternoon hours involve triaging Trivy scans, updating their shared vulnerability spreadsheet, and attending a chaotic stand-up where the team debates a critical bug. She ends the day at 7:00 PM, often staying later to write documentation or test a new automation script. Evenings are reserved for unwinding with a book or a walk, keeping her mind away from code until the next morning.
Lifestyle
Conchita lives in a sun-drenched apartment in Gràcia, sharing rent with her partner to keep costs manageable while saving for a future home. Her mornings start early with a strong coffee and a 30-minute bike ride through the city's winding streets, a ritual that grounds her before the coding begins. She is health-conscious, prioritizing fresh local produce and regular yoga sessions on weekends. Financially, she is prudent; she tracks every euro, preferring value over luxury, which aligns with her professional skepticism of bloated enterprise software. Socially, she balances quiet evenings with close friends against the vibrant energy of local tech meetups, where she often shares insights on open-source projects rather than just consuming content.
Work life
At her 8-person startup, Conchita wears the hat of Product Engineer, bridging the gap between rapid feature development and system stability. The team ships a web app powered by an AI summarizer and containerized backend jobs, moving fast enough that traditional security gates would slow them down. Without a dedicated CISO or security specialist, she autonomously manages the security posture using a lightweight stack: Dependabot for dependency updates, Trivy for container scanning, and a meticulously maintained shared Google Sheet to track vulnerabilities and remediation status. Her week revolves around these tools, culminating in rigorous weekly release reviews where the entire team debates risk versus speed. She spends hours debugging integration issues and manually verifying that the AI-generated code doesn't introduce silent failures, balancing the thrill of innovation with the weight of sole responsibility.
Relationships
Conchita is deeply embedded in the Barcelona tech community, maintaining a tight-knit circle of fellow engineers who swap war stories about production outages and security scares. She has a supportive relationship with her founders, who trust her judgment implicitly but occasionally push for speed over caution. Her family back in Valencia visits monthly, providing a grounding counterbalance to the high-stakes environment of the startup. She relies heavily on peer advice from online communities when facing ambiguous technical decisions, valuing the collective wisdom of the open-source ecosystem over corporate marketing.
How they decide
Conchita operates with a 'measure twice, cut once' philosophy, though she adapts the depth of measurement based on the immediate business context. She is research-heavy, often spending late nights reading documentation and testing open-source alternatives before committing to a workflow change. While not impulsive, she is willing to take calculated risks if the data suggests a clear path forward. Her decisions are heavily influenced by practical utility and peer validation; if a tool solves a problem elegantly and is trusted by respected engineers, she will adopt it quickly. Conversely, she resists complexity that doesn't yield proportional value, often defaulting to the simplest viable solution.
How they sound
She speaks with a calm, measured cadence, often using precise technical terminology but explaining complex concepts simply when needed. Her tone is collaborative and direct, avoiding hyperbole or unnecessary jargon. She tends to ask clarifying questions before making assertions, reflecting her cautious nature. In casual settings, she mixes standard Spanish with local Catalan phrases and tech slang, creating a relaxed but professional atmosphere. She avoids making absolute guarantees about system reliability, preferring qualifiers like 'based on current tests' or 'likely scenario.'
Personality traits
- methodical yet adaptable
- resourceful under constraints
- collaborative communicator
- curious about edge cases
- calm under pressure
- hands-on problem solver
- value-driven decision maker
- tech-savvy pragmatist
- proactive learner
- reliable team anchor
Goals
- Achieve a stable, scalable architecture that supports 10x user growth without technical debt accumulation
- Master advanced container orchestration patterns to reduce operational overhead
- Build a reputation as a go-to expert in AI-assisted secure development practices
- Lead the migration to a more robust CI/CD pipeline that automates compliance checks
- Maintain a healthy work-life balance while driving the company's product roadmap
- Mentor junior developers on writing secure, efficient code from day one
Problems & frictions
- The cognitive load of manually correlating security alerts across multiple free tools
- Fear of missing critical vulnerabilities due to the lack of automated policy enforcement
- Time pressure to ship features conflicts with thorough manual security audits
- Difficulty convincing non-technical stakeholders of the urgency of specific security fixes
- Reliance on a single spreadsheet creates a fragile source of truth prone to human error
- Limited budget prevents hiring specialized security talent or buying premium enterprise tools
Values
- productiveness
- team learning
- simplicity
- ownership
- pragmatism
- transparency
Interests
- startup product work
- web apps
- open-source tools
- machine learning ethics
- urban cycling
- indie music
Media habits
- Hacker News and Reddit r/devops for daily updates
- Engineering blogs from major cloud providers
- Local Catalan tech meetups on Meetup.com
- Podcasts about startup scaling and AI safety
- Twitter/X threads by independent security researchers
- YouTube tutorials on container orchestration