Portfolio / Security Operations

Cybersecurity Engineer

Cybersecurity engineer focused on security operations, identity, privileged access, and data protection.

Paraguay

Open to relocation and remote roles

ESEN

About

I work across security operations, privileged access, data protection, and vulnerability management, connecting offensive testing with defensive engineering.

My recent work includes enterprise-scale implementations across 40+ companies: CyberArk PAM and PSM, BigID data discovery, Netskope DLP governance, vulnerability remediation, and security automation.

40+companies covered by enterprise security implementations
20+companies onboarded to CyberArk PSM governance
5+security operations workflows automated
  • Security Operations
  • Privileged Access Management
  • Identity & Access Management
  • Data Protection
  • Vulnerability Management
  • Security Automation
  • Internal Penetration Testing
  • MITRE ATT&CK

Experience

Sep 2025 - Present

Security Operations Analyst

ITTI - Grupo Vazquez / Asuncion, Paraguay

  • Led the end-to-end reimplementation of CyberArk PAM across 40+ companies, migrating nominal accounts from Privilege Cloud to Secure Infrastructure Access and improving license utilization.
  • Deployed CyberArk PSM across 20+ companies, enabling centralized session recording and privileged session governance at enterprise scale.
  • Implemented BigID for sensitive-data discovery and classification across multiple environments, supporting GDPR-aligned governance.
  • Tuned Netskope DLP policies per business unit to improve detection accuracy and reduce false positives.
  • Built Netskope and BigID behavioral-analytics workflows that surfaced anomalous data-access patterns for internal fraud investigations.
  • CyberArk
  • BigID
  • Netskope
  • PAM
  • DLP

May 2024 - Sep 2025

Information Security Analyst

Personal Paraguay / Asuncion, Paraguay

  • Led internal penetration testing and coordinated vulnerability remediation across 40+ production servers.
  • Designed a structured vulnerability-management process integrated with asset inventory and IAM controls.
  • Automated 5+ recurring security operations tasks using Ansible and custom scripts, reducing manual effort across the team.
  • Pentesting
  • Vulnerability Management
  • Ansible
  • IAM

Jul 2023 - May 2024

Information Security Analyst

NEST Security / Asuncion, Paraguay

  • Promoted from intern to full-time analyst after delivering vulnerability assessments supporting red-team exercises and defensive control improvements.
  • Vulnerability Assessment
  • Red Team Support

Certifications

Projects

Sigea Scan

Open source / repo to be updated

Security engineering / Vulnerability management platform / 2025 - Present

Developing an on-premise vulnerability scanning and management platform designed to simplify deployment, normalize findings, and make security assessments more accessible to smaller organizations.

  • Python
  • Go
  • Cloudflare
  • Docker

MagicLink

Zero-knowledge one-time secret sharing service

Open source / repo to be updated

Security engineering / Secret sharing platform / 2026 - Present

Planning an open-source Go service for sharing passwords, API keys, and tokens through one-time links with client-side AES-256-GCM encryption, Redis-backed atomic burn-after-read, TTL enforcement, and free audit logging for compliance use cases.

  • Go
  • Redis
  • WebCrypto
  • AES-GCM
  • Docker

AccessGraph

CyberArk privileged access visibility CMDB

Private lab / closed source

CyberArk Access Visibility Tool / 2026 - Present

Building a lightweight CMDB that maps end-to-end privileged access visibility in CyberArk, from identity/user through access policy to PSM session target, consolidating data from both Privilege Cloud and SIA via API into a single queryable graph. Goal: answer 'what can this user actually reach, and how' in one lookup instead of cross-referencing multiple consoles.

  • CyberArk API
  • PAM
  • SIA
  • Python
  • FastAPI

Education

B.Eng. Computer Science

Taiwan-Paraguay Polytechnic University (UPTP), Asuncion. Completed 15 months of full-time coursework in Taiwan through a merit-based academic exchange.

Contact

Feel free to contact me — always open to helping, collaborating, or participating in security projects. You can find me on: