Francisco Mohedano Email & Phone Number

Seville, Al, Es

Sevilla, Andalucía, España

In this cybersecurity analyst position I have performed all kinds of defensive and offensive security tasks such as:- Making hardening guides. I have made a wide range of hardening guides, both for Linux and Window machines as well as for tools such as databases and Active Directory. For this I have taken into account the current CCN and CIS guides.- Implementation and automation of hardening guides. I implemented Ansible playbooks and roles (together with AWX) to apply the hardening guidelines and check that they are being followed at all times.- Securing deployments and images in Kubernetes. I have carried out review tasks of Kubernetes deployments to increase their security, at securityContext level and at container image level.- Monitoring and triage of Cortex XDR and Elastic SIEM security alerts and events.- Vulnerability management and resolution. I have addressed and managed vulnerabilities detected by Cortex XDR and other vulnerability detection tools.- Internal penetration testing. I have performed internal web pentesting to the company's own software to detect vulnerabilities and evaluate the security level. I have followed methodologies and recommendations of the OWASP project and tools such as Burp Suite and OWASP ZAP.- Firewall management. I have maintained, updated and created rules of different firewalls.- Malware analysis. I have analyzed malware detected by EDR, following traces, comparisons and monitoring it in isolated environments.- Technical support in auditing processes for obtaining accreditations such as ISO 27001 or ENS. I have participated with technical support showing different types of evidence to demonstrate that the company complied with the requirements of each accreditation.- AST implementation. I have worked in the selection and implementation of an Application Security Testing.- WAF implementation. I have worked in the selection and implementation of a Web Application Firewall.

Since the beginning of my career in Edicom, I have held the position of System Administrator. Within the SYSTEM department I have been part of the DATA team and I have performed tasks such as:- ElasticSearch on-premise cluster administration. Including deployment, maintenance and optimization of ElasticSearch clusters and the entire ELK stack (which includes Kibana, Logstash, Beats and ElasticSearch). - Relational database management systems such as MySQL and SQLServer, as well as their high availability with synchronization with Galera Cluster. - Object-oriented storage systems and file systems such as Ceph, ZFS and GlusterFS.- Monitoring with the entire Prometheus environment. To collect metrics and monitor container platforms I have worked with Prometheus Operator, Grafana, Alertmanager and Victoria Metrics, in addition to ELK and EFK stacks.- Configuration and deployment automation using Ansible and AWX. I implemented Ansible playbooks and roles that allowed configuring and deploying different Ceph clusters, ElasticSearch, MySQL and even for all kinds of tasks where it was necessary to run commands in parallel on all machines.- Technical support for auditing processes to obtain accreditations such as ISO 27001. I have participated with technical support showing different types of evidence to demonstrate that the company complied with the requirements of each accreditation. - Configuration of load balancers using KeepAlived, HAProxy and Nginx. To provide high availability and balancing I have worked with these tools.- Database migrations between SQLServer and MySQL with tools like SymmetricDS. - Scripting in different languages. I have implemented many scripts written in different languages like Bash and Python.- Security tools management. I have worked with firewalls and SIEMs like Elastic SIEM. I work with EQL for security event correlation.

Master'S Degree In Computer Engineering

University Master's Degree in Computer Engineering of 90 ECTS credits that deals with the most innovative topics in computer science.

Engineering Degree, Computer Engineering

University Degree in Computer Engineering with 240 ECTS credits, specializing in Information Technology.