Felipe C. Email & Phone Number

Carlsbad, Ca, Us

Carlsbad, Ca, Us

Atlanta, Ga, Us

Main responsibilities included:* Developing and integrating the business unit Information Security Management System (ISMS), with Verizon’s information security framework.* Support the internal audit by revising ISMS controls. * Leading the vulnerability management program.* Leading the application security program. * Coordinate and validate third party penetration testing assessments. * Integration of security tools with our SIEM for event centralization.* Researching and evaluation of security tools.* Defining KPIs for the programs led. * Integrating security controls on the SDLC.* Integrating security controls during build and deployment time of containers. * Actively participate on change management requests as an approver.

Coppell, Texas, Us

Main responsibilities included:* Conduct risk assessments of all four business units.* Integrate different compliance frameworks into a single set of controls based on ISO 27001.* Vulnerability management/assessment to maintain a healthy and stable infrastructure.* Vulnerability analysis and evaluation over web applications based on OWASP.* Analyze customer’s vulnerability reports to determine their applicability in the local environment and modified severity levels appropriately if necessary. * Black and white-box penetration testing.* Responsible for maintaining and auditing of PCI-DSS and SOX controls.* Implementation, management and maintenance of the SIEM/IDS system (AlienvaultOSSIM) and its interoperability with other security systems such as the Antivirus,Firewalls, ACS, HIDS, Proxy and Vulnerability Scanners.* Development and maintenance of information security governance indicators (KPIs).* Applied maintenance on the Information Security Management System (ISO 27001).* Corporate information security incident management. * Leader on the first responder forensic team for investigations that include digital evidence. * Develop and maintain information security training and awareness programs for the employees nationwide.* Security consultant for new projects and in-house developments in the organization. * Mentored information security analyst. * Symantec/PGP Whole Disk Encryption management.

Bogota, Dc, Co

Main responsibilities included:* Security testing over the software development life cycle process for the in-house developed products like ITAC Secure File Server and Client, ITAC WS-Guardian and customer’s web applications developed and maintained by the company. * Vulnerability assessment for the in-house products and some customer developments as we maintained their applications. * Dynamic and static code analysis and review over customer’s applications using standards such as OWASP, CWE-SANS and PCI-DSS. * Support the quality assurance team for information security matters. * Design and evaluation of security configuration templates (hardening) for appliances delivered with the in-house products.* Give first level support to customers who bought the in-house tools.* Research on software and hardware security tools to compliment the in-house developed security software.

Information Security Incident Handler, Information Security

It Risk Management Specialist, It Risk

Bachelor Of Engineering (B.E.), Computer Science Engineer