Jasson Avila

• Strengthened ZF’s cybersecurity posture through hands-on penetration testing, vulnerability management, and infrastructure hardening.
• Conducted regular assessments of web applications and internal systems using industry frameworks including OWASP, MITRE ATT&CK, and OSSTM.
• Delivered training to local IT teams on secure configurations and incident response procedures across multiple sites in the Americas.
• Supported Critical Design Reviews to ensure secure architecture for new applications.
• Authored detailed technical reports and executive summaries with prioritized remediation steps.
• Conducted CIS-compliant hardening of Linux systems, improving compliance scores by 40% in key audit areas.
• Utilized tools such as Burp Suite, Nessus, Nmap, Suricata IDS/IPS, and custom Python/Bash scripts to simulate attacks and validate security controls.
• Led the deployment and configuration of Tenable.io, enabling automated scanning for 1,500+ assets.
• Identified and remediated vulnerabilities, reducing risk exposure by 35% across 250+ servers.
• Executed penetration tests across internal networks, mobile applications, and critical web applications.

• Maintained smooth operation of multi-user computer systems through collaboration with hardware and network engineers.
• Installed and allocated mass storage deployments, maintaining integrity of RAIDs.
• Interacted directly with users to diagnose and correct major system issues and address concerns.
• Optimized system security and performance with proactive changes such as updates and tuning configurations.
• Resolved issues and escalated problems with knowledgeable support and quality service.
• Optimized storage for VMs.
• Optimized cluster services.
• Provided high quality service to end users.
• Provided support for instances in Rackspace Cloud and AWS (EC2), through portal or by terminal.

During this internship I was part of Blue Team where the role was focused on:

• Deploy, test and manage network security (IPs, iptables and IPS)
• Hardening systems (Linux) based on CIS and NIST benchmarks.