Portfolio / Security Operations

Cybersecurity Engineer

Cybersecurity engineer focused on security operations, identity, privileged access, and data protection.

Paraguay

Open to relocation and remote roles

ESEN

About

I work across security operations, privileged access, data protection, and vulnerability management, connecting offensive testing with defensive engineering.

My recent work includes enterprise-scale implementations across 40+ companies: CyberArk PAM and PSM, BigID data discovery, Netskope DLP governance, vulnerability remediation, and security automation.

40+companies covered by enterprise security implementations
20+companies onboarded to CyberArk PSM governance
5+security operations workflows automated
  • Security Operations
  • Privileged Access Management
  • Identity & Access Management
  • Data Protection
  • Vulnerability Management
  • Security Automation
  • Internal Penetration Testing
  • MITRE ATT&CK

Experience

Sep 2025 - Present

Security Operations Analyst

ITTI - Grupo Vazquez / Asuncion, Paraguay

  • Led the end-to-end reimplementation of CyberArk PAM across 40+ companies, migrating nominal accounts from Privilege Cloud to Secure Infrastructure Access and improving license utilization.
  • Deployed CyberArk PSM across 20+ companies, enabling centralized session recording and privileged session governance at enterprise scale.
  • Implemented BigID for sensitive-data discovery and classification across multiple environments, supporting GDPR-aligned governance.
  • Tuned Netskope DLP policies per business unit to improve detection accuracy and reduce false positives.
  • Built Netskope and BigID behavioral-analytics workflows that surfaced anomalous data-access patterns for internal fraud investigations.
  • CyberArk
  • BigID
  • Netskope
  • PAM
  • DLP

May 2024 - Sep 2025

Information Security Analyst

Personal Paraguay / Asuncion, Paraguay

  • Led internal penetration testing and coordinated vulnerability remediation across 40+ production servers.
  • Designed a structured vulnerability-management process integrated with asset inventory and IAM controls.
  • Automated 5+ recurring security operations tasks using Ansible and custom scripts, reducing manual effort across the team.
  • Pentesting
  • Vulnerability Management
  • Ansible
  • IAM

Jul 2023 - May 2024

Information Security Analyst

NEST Security / Asuncion, Paraguay

  • Promoted from intern to full-time analyst after delivering vulnerability assessments supporting red-team exercises and defensive control improvements.
  • Vulnerability Assessment
  • Red Team Support

Certifications

Projects

Switchboard

Identity-aware reverse proxy and static-site gateway

In developmentOpen source

Security engineering / Identity-aware gateway / 2026 - Present

A Go reverse proxy with host-based routing, external OIDC login, claim-based access policies, and static-site serving. Validated locally; public deployment is pending. Outbound tunnels, passwordless identity, a private CA, and infrastructure access are roadmap goals.

No public demo

  • Go
  • OIDC
  • Reverse proxy
  • Static sites

Custodia

Operational CMDB for CyberArk and Netskope

In developmentPrivate lab / closed source

CyberArk Access Visibility Tool / 2026 - Present

Operational inventory and source-specific views for CyberArk and Netskope, with access controls, audit trails, and human review. Private work in active development; no public access or demo is offered.

Private app · no public demo

  • CyberArk
  • Netskope
  • FastAPI
  • React
  • PostgreSQL

Education

B.Eng. Computer Science

Taiwan-Paraguay Polytechnic University (UPTP), Asuncion. Completed 15 months of full-time coursework in Taiwan through a merit-based academic exchange.

Contact

Feel free to contact me — always open to helping, collaborating, or participating in security projects. You can find me on: