Irvin Vargas Alvarez

Main role and activities:

• Handover Security/Networking Activities to Capgemini delivery team
• Leadership and work plan Vulnerability remediation - Any to any Firewall Rules
• IAM Policy Validator.
• Troubleshoot difficult scenarios for Cloud/ ONPREMISE Connectivity.
• Proactively identified areas for process improvement within the organization''s IT infrastructure management approach.
• Helping to document new RFP opportunities.

Achievements:

• Successfully handed over all operations to L1 Support Engineers.
• Remediation for all "any to any” Firewall Rules. (0.0.0.0/0) (to 100% of coverage).
• Remotion of excessive privileges in Cloud identities Editor & Owner Roles (In progress: Coverage 25%).
• Obtained Google Professional Cloud Security Engineer Certification
• Supporting 12 Level 1 Engineers.
• Migrating External LB applications from Un-trusted network to Internal LB and FW NGFW Appliance to Trusted VPC’s. (In progress: Coverage 70%)

Main role and activities:

• Deploying Terraform Pipelines for IaC for Necessities of Development team.
• Covered Security Controls from CIS Benchmark 1.2

Achievements:

• Covered all security Controls for DWH migration according to CIS Benchmark 1.2
• Created Terraform Code and Pipelines to assign IAM Policy Bindings for all Datasets for Cloud Dataware House in BigQuery.

Main role and activities:

• Ensure all aspects of security for a Banking App.
• Help to detect and correct Vulnerabilities.
• Diagram and define specifications for development team.

Achievements:

• Carried out Security Architecture definition of Mobile Banking application.
• Performed creation of Technical Design of components for mobile applications and their integration with SDKs such as TrustTeer / RSA frameworks.
• Explained Ethical Hacking reports to the development team and helped to assign those responsible for the vulnerabilities to be corrected.
• Gave the guidelines for the quality of the Code (Java 8) and micro-services.
• Checked the security of APK and IPA files with MobsF.
• Followed up on the Reverse Engineering Tests and their coverage with ARXAN.
• Carried the understanding to the development of SAST and DAST vulnerability reports from VERACODE to correct or properly mitigate the issues.

• Main role and activities: As a Security Architect, I was in charge of performing security scans for different applications and Onpremise infrastructure
• Achievements: Planned and executed the Infrastructure Security project, to check the status of the current Infrastructure of the All Do Healthy product, Carried the Mobile Security project, to check the status of the All Do Healthy mobile application.

• Enhanced overall security by conducting comprehensive risk assessments and implementing tailored security plans.
• Improved response time to incidents by developing effective communication protocols within the security team.
• Performed active scanning and monitoring closure of vulnerabilities at On-premises Servers with OpenVAS (Linux) and Nessus Professional (Windows).
• Carried Security pen-testing on the infrastructure with Kali Linux.
• Performed the Computer Security Audit with Lynis -Linux and Scripting Windows (Powershell).
• Made a security review of the company's WEB Portals.
• Created Security Policies aligned to the company's strategy.
• Reviewed Security on Routers and Switches.
• Anti-piracy Activities