Email security
Proofpoint administration, phishing and BEC investigations, SPF/DKIM/DMARC, policy tuning, classification, and false-positive reduction.
Cybersecurity engineering · Security architecture · Applied AI
Practical security expertise for organizations that need results.
I help organizations implement, strengthen, and operate security capabilities—from Proofpoint and email defense to testing, detection, cloud controls, and responsible AI.
Santiago, Dominican Republic · Serving globally
10+Years of cybersecurity experience
10Core platforms & clouds
2Languages: English & Spanish
01 — Expertise
Where I create value
A practical blend of platform depth, investigative judgment, analytics, and executive communication.
Detection & response
XDR alert triage, threat hunting, telemetry correlation, incident scoping, MITRE ATT&CK mapping, and root-cause analysis.
Security analytics
KPI design, Tableau and MicroStrategy dashboards, trend analysis, control-performance insights, and executive reporting.
AI & automation
Responsible generative AI, prompt engineering, AI-assisted investigation, workflow design, Python scripting, and human validation.
Vulnerability & testing
Web application testing, vulnerability analysis, risk-based remediation, Burp Suite, Nessus, Qualys, and Tenable.
Architecture & cloud
Secure configuration, change validation, security architecture, Microsoft 365, Azure, AWS, and Google Cloud.
02 — Experience
Built across the full security lifecycle.
My experience spans frontline monitoring and incident triage, penetration testing, senior information security analysis, Proofpoint deployment engineering, and broader security engineering. I work across both Proofpoint deployments and security engineering, bringing an end-to-end perspective—from identifying threats and validating weaknesses to deploying controls and engineering durable security solutions.
Areas of professional experience
01
Monitor & respond
SOC Analyst
Security alert monitoring, suspicious-activity triage, endpoint and network telemetry correlation, investigation documentation, and incident escalation for containment and response.
02
Test & validate
Penetration Tester
Assessment of web applications and infrastructure for exploitable weaknesses, technical-impact validation, evidence documentation, and risk-based remediation guidance.
03
Analyze & lead
Senior Information Security Analyst
Complex investigations, vulnerability analysis, risk-based decision support, cross-functional incident coordination, security reporting, and repeatable operational procedures.
04
Deploy & optimize
Proofpoint Deployment Engineer
Implementation and configuration of Proofpoint Email Protection, TAP, TRAP, and Email Fraud Defense, including policy tuning and support for reliable operational adoption.
05
Engineer & scale
Security Engineer
Security-control design, detection improvement, platform integration, secure configuration, cloud safeguards, analytics, automation, and validation across the security environment.
Security Engineering & Operations · Financial Services
- 01
Deploy, administer, and optimize enterprise email-security capabilities across Proofpoint Email Protection, TAP, TRAP, and Email Fraud Defense.
- 02
Investigate alerts and incidents using XDR, endpoint, network, and email telemetry; coordinate containment and remediation.
- 03
Turn security data into operational metrics and executive-ready narratives using Tableau and MicroStrategy.
- 04
Build playbooks, configuration standards, investigation procedures, and AI-assisted workflows with governance safeguards.
03 — Selected capabilities
How I help organizations strengthen security.
These are a few representative examples from more than a decade of cybersecurity experience across security operations, testing, analysis, implementations, and engineering.
Sony · United States
Security architecture audit
Conducted security architecture audit work for Sony in the United States. Engagement details and findings remain confidential.
Medium to large organizations
Enterprise Proofpoint deployments
Delivered Proofpoint implementations for organizations with complex email-security and operational requirements. Client identities and deployment details remain confidential.
APAC
Regional Proofpoint deployments
Executed Proofpoint deployment work for organizations across the Asia-Pacific region. Client identities and technical details remain confidential.
City of Atlanta · USEI
Penetration testing
Performed penetration-testing engagements for the City of Atlanta and USEI. Technical findings, affected systems, and remediation details are intentionally not disclosed.
Organizations are identified only to describe professional engagement experience. No endorsement is implied, and confidential information is not presented.
04 — Speaking & education
Making security useful to the people who rely on it.
Available for practical briefings, workshops, and conversations on email security, AI for cybersecurity, security operations, and translating technical risk for business leaders.
- 01Email security beyond the gateway
- 02Responsible AI in security operations
- 03From security telemetry to executive decisions
- 04Practical cyber resilience for growing businesses
05 — Credentials & tools
Continuous learning, proven platforms.
Associate of Science, Information Technology Management · University of Phoenix
Certifications
CISMAIGPProofpoint CDPCompTIA Security+IACRB Certified Ethical HackerCertified ScrumMaster (CSM)Certified Scrum Product Owner (CSPO)ICAgile ICP-ACCMITRE ATT&CK DefenderIntelTechniques OSINT
Platforms & cloud
ProofpointSophos XDR (formerly Secureworks Taegis XDR)SplunkSailPointCarbon BlackTenableQualysTableauMicroStrategyAzureAWSGoogle Cloud
AI & development
Python development and practical experience across commercial and open-source LLM ecosystems, including multi-model workflow design and responsible use.
PythonCommercial LLM platformsOpen-source LLMsPrompt engineeringMulti-model workflowsResponsible AI governance
06 — Let’s connect
Have a security challenge worth solving?
Let’s discuss your security objectives, current gaps, and the right scope for an assessment, implementation, engineering engagement, or advisory project.
Professional services are delivered through Carrington Consulting Group, with practical scopes designed around each organization’s needs.