Specialized in Cloud Security Architecture (CSPM / CIEM), Threat Modeling, and DevSecOps Automation.
Certified Cloud Security Professional (CCSP®) & Certified Cloud Governance Professional (CCGP) by ISMS Forum.
- 💼 Current Role: Security Transformation Analyst at Accenture, helping enterprise organizations evaluate, design, and secure cloud environments (AWS & Azure).
- 🎓 Education: Master's in Cybersecurity & Computer Systems Engineering background.
- 🔒 Core Focus:
- Cloud Security Posture Management (CSPM) & multi-cloud baseline compliance (CIS Benchmarks).
- Threat Modeling & Architectural Reviews: Applying STRIDE and MITRE ATT&CK mapping for enterprise cloud services.
- Automated Security Pipelines: Developing zero-maintenance telemetry watchers, Policy-as-Code checks, and threat intel feeds.
- Compliance & Governance: Cloud Security Alliance (CCM), ISO 27001, and Spanish ENS (Esquema Nacional de Seguridad).
Cloud Platforms :: AWS, Microsoft Azure, Multi-Cloud Governance
Cloud Security :: CSPM, CIEM, IAM Hardening, Security Groups, KMS, GuardDuty, Defender for Cloud
Automation & Script :: Python 3, Bash / Shell, PowerShell, Git, REST APIs
Infrastructure as Code: Terraform, Ansible, Docker
Threat Intel & Models :: CISA KEV, MITRE ATT&CK, NIST CSF, STRIDE, FIRST EPSS
Standards & Frameworks:: ISO 27001, ENS, CIS Benchmarks, Cloud Security Alliance (CSA)
- 📡 threat-intel-watcher: Autonomous cloud pipeline tracking CISA Known Exploited Vulnerabilities (KEV) in real time.
- ☁️ cloud-sec-benchmarks: Automated CIS baseline checks and CSPM policy validation signatures.
- 🎯 epss-threat-radar: Daily correlation engine prioritizing high-risk vulnerabilities via EPSS scoring.
"Security is not a product, but a continuous engineering process."