Threat detection
SIEM correlation, alert tuning, log analysis, threat hunting and detection-as-code workflows.
Cybersecurity / Threat Defense
Secure the
/ signal.
Cybersecurity engineer focused on threat detection, security testing, incident response and resilient systems. I turn noisy telemetry into decisive action.
CSL//NODE-07STATUS: HARDENED
[ integrity verified ]
01 / Defensive profile
Quiet systems.
Loud defenses.
I build security programs around the attacker's perspective: map the surface, expose the weak signal, validate the control, then make the fix measurable. My work spans blue-team operations, offensive validation and security engineering.
42critical findings closed
18incident playbooks shipped
7security programs supported
96control coverage / %
02 / Security arsenal
Find the breach
before it finds you.
A practical security stack combining detection engineering, vulnerability management and incident readiness.
Pen testing
Web, API and infrastructure assessments with evidence-led reporting and remediation guidance.
Incident response
Containment, triage, root-cause analysis and post-incident hardening under pressure.
Cloud security
Identity controls, network segmentation, secrets hygiene and secure cloud configuration reviews.
Security automation
Python and workflow automation that reduce repetitive triage and accelerate control validation.
Risk engineering
Translate technical exposure into prioritized risk, ownership and measurable security outcomes.
03 / Operations timeline
From alert
to assurance.
Senior Cybersecurity Engineer · SentinelWorks
Own detection engineering and vulnerability remediation across hybrid infrastructure; improved alert quality and formalized incident-response playbooks.
Security Analyst · Northstar Systems
Led SOC investigations, threat hunting and endpoint triage while partnering with engineering teams on recurring control gaps.
Systems Security Associate · Gridline Labs
Built security baselines, automated evidence collection and supported infrastructure penetration testing.
04 / Case files
Evidence over
assumptions.
Selected security work presented as outcomes, not buzzwords.
Signal / Zero
Reworked a noisy authentication detection set into prioritized identity-threat rules, cutting analyst review volume by 38% while improving high-risk coverage.
01API breach-path audit
Mapped privilege escalation paths across a multi-service API and drove remediation of high-impact authorization flaws.
90-minute containment playbook
Designed a repeatable response flow for credential compromise, from first alert to validated recovery.
05 / Contact channel
Let's harden
the surface.
For security engineering roles, threat-defense collaborations, assessment work or professional conversations, send a message.
✉ mateo@example.com
☎ +34 91 555 0136
◈ Madrid, ES