Àlvaro_ E Email & Phone Number

- Digital Forensics and Incident Response- Cyber Threat Intelligence- SOC Manager / SOC Manager Deputy- SOC and CSIRT coordination activities

Madrid, Community Of Madrid, Spain

Security Delivery Associate Manager

Madrid Area, Spain

● Digital Forensics & Incident ResponseAs part of the DFIR team, these duties include, but are not limited to, incident analysis and management, collecting and processing digital evidence, generation of Indicators of Compromise (IOCs), issuing technical reports in a comprehensive way for non-technical audience and evidence handling. This is achieved through the use of the following technologies:• Hardware and Software acquisitions: different Tableau write blockers, Cellebrite UFED, Brimor Labs, FTK Imager, Guymager, DumpIT, RamCapturer, Lime, Microsoft AVML, FireEye HX, FireEye PX and usage of different Linux distros such as Caine or Kali / Parrot• Client and server-based forensics on Windows, Linux and OS X.• Google Workspace (formerly Google Suite) audit and forensics• Use of different tools such as Volatility, Yara, FTK, Autopsy, Nuix, Redline, FireEye, LogParser, McAfee Drive Encryption DETech, Pestudio, Strings, PEview, IDA Pro, FireEye AX, Cuckoo Sandbox, hashcat, tcpdump, Wireshark and Google Apps among others.• Shell Script to automate the extraction of forensic artifacts from different sources such as logs, memory dumps and disk images in a Forensic Laboratory.• Basic knowledge of Microsoft Azure and KQL queries• Report writing and evidence handling.• Learning Malware Analysis and Memory Forensics on my own. ● eDiscovery tasks attending petitions from Law Enforcement and Court Processes.● Forensic Readiness tasks.

Madrid Area, Spain

● Linux Administrator responsibilities under Red Hat Enterprise Linux, CentOS, Ubuntu and Debian.• POC: customized, hardened and automated Linux installation using Kickstart and Openscap. System and Audit logs integrated with Graylog.• POC: Security Compliance checks based on Nessus and SCAP integration.• Design of Good Practices documents based on ISO 27000 and Documentation tasks.● Basic experience with IBM AIX 7.● Basic experience with IBM Storwize V5000 & V7000 storage and Brocade SAN switches.

Celgene Research

● Linux Administration and Local Support tasks.• Installation, deployment, configuration, administration and local support of Red Hat Enterprise Linux 6 / CentOS 6 & 7 / Scientific Linux 6 & 7. Shell Scripting / Expect / Bash abilities.• Multiple tasks related to Nmap, automated Kickstart installations, TFTP, NFS, vSMP Foundation – ScaleMP, Mellanox, Infiniband, VMware vSphere and documentation.● Network and Security• Experience deploying, monitoring and troubleshooting Cisco Catalyst switches. Cisco iOS, VLAN, LACP, STP, SNMP.• Admin tasks on iptables-based firewall, squid-based proxy, OSSEC and openVPN.• Monitoring with Nagios and Pandora FMS. SNMP v3.• Personal Projects related to OpenVAS, Suricata, Metasploit and Yersinia. Kali linux.● Help Desk Support• Level 1 support for Windows 7, Microsoft Office 2007 & 2016, Outlook, Microsoft Lync / Skype for Business, Cisco AnyConnect, VPN, RSA, Webex, InterCall, BlackBerry, iPhone, Tandberg Videoconference, Avaya, DUO Security, Good for Enterprise, Symantec Altiris, McAfee, Citrix, Cirrato and Aspera Connect, Microsoft SharePoint site administration and Service Now ticketing system.• User training.

Network And Communications Department

● IT Perimeter Security• Tasks related to maintenance, data analysis and monitoring of security servers such as iptables-based firewalls and squid-based proxy servers running under Red Hat Enterprise Linux 5.• High Availability, VRRP and Heartbeat.• Use of different firewall GUIs such as Firewall Builder and PowerGate.• Application of best practices and internal policies.• Use of Snort for log analysis.● Networking• Analysis, design, deployment, configuration and monitoring of network elements, always focusing onsecurity best practices, which also includes network core, DHCP and DNS servers.• Monitoring and data analysis based in Nagios, openNMS and custom scripts. Knowledge of SNMP.• Design of monthly statistics related to traffic, network availability and possible security breachesaccording to the client’s defined standards.• Use of technologies like STP/MSTP, SNMP, VLAN and LACP among others. Daily use, configurationand maintenance of 3Com switches and Alpine Extreme Networks core.• Basic experience with F5 Big-IP Load Balancers.• Use of Wireshark and tcpdump to detect and check network related issues.● Others• Deployment of a network of videoconference terminals Tandberg 2000 and use of H.323 protocol.• Experience maintaining and monitoring LDAP servers based on openLDAP.• Monitoring and maintenance of Terescope MRV Free Space Optics.• Basic experience administering VMWare vSphere.• Knowledge and experience with different Help Desks, Service Desks, CAUs and RMA systems.• Experience managing HP iLo and Dell DRAC.• Design of metrics and reports based on the customer needs.• Maintaining and creation of new documentation according to client’s standards.

• Analysis, design and deployment of a custom design under OneCMDB and different tasks related to ITIL according to client’s needs. This included the creation of vast documentation and mentoring the IT Department in the use, configuration, administration, tips and tricks of OneCMDB.• Support tasks of diferent nature in the IT Department: management of a pool of Blade HP ProLiant servers, VMWare, JBoss, Tomcat, deployment of new applications, DNS, DHCP.

Full use of different custom Help Desks and Service Desks in order to read, priorize and execute the tasks needed to fix different problems with different clients.Experience with backup robots, Help Desks and maintenance, and configuration of different network elements, such as routers and load balancer servers based in Apache. Printers repair, Data Centers cabling.Part of this job was oriented to the client's personal satisfaction, which gave me ability to work under pressure and to adapt to an environment in constant changes.