David Camacho

Senior Cybersecurity Manager with 10+ years securing cloud, trading and critical-infrastructure environments. Lead ISO 27001:2022 programs, AWS security architecture and Red Team operations. Recently built multi-agent AI SecOps workflows that cut vuln triage and code-review time by ~70% while preserving release speed.

Senior Cybersecurity Manager at Tecnologica (2025-07 – Present)

• Designed and integrated a multi-agent AI SecOps architecture (Gemini Pro, Claude) into GitLab CI/CD, cutting vulnerability triage and security code review times by ~70% without slowing releases.
• Hardened AWS cloud environments for financial and healthcare workloads by tuning AWS WAF, Security Hub, GuardDuty, Inspector, CloudWatch, ECS, and SSM to detect and contain active threats across multi-account infrastructure.
• Eliminated 100% of critical audit findings on static credentials and unauthorized production access by enforcing least privilege with AWS IAM roles and Secrets Manager, while leading ISO 27001:2022 implementation and security governance across subsidiaries.
• Directed cross-functional technical teams (~12 professionals across DevSecOps, infrastructure, and QA), enforcing strict architectural controls and secure coding practices with an operational, hands-on leadership style that avoids administrative bottlenecks.

Senior Hacker-Pentester at ENADOM (2022-01 – 2024-10)

• Led security architecture reviews and rigorous pentesting of SCADA/ICS (PLCs, RTUs, control systems), achieving 100% mitigation of high-risk pre-deployment vulnerabilities.
• Enforced strict hardening and software integrity checks on Emerson contractor deployments, ensuring zero compromised control systems or backdoors reached the production plant.
• Implemented Fortinet Security Fabric, Microsoft Defender for IoT, and Azure Sentinel to centralize OT/IT monitoring and strengthen detection of attacks on industrial processes.

Senior Hacker-Pentester at IC Markets (2020-11 – 2022-01)

• Defined and led the offensive security and Red Team strategy for critical electronic trading, payment, and order settlement systems.
• Achieved a zero-incident rate on production trading platforms by identifying and mitigating high-risk vulnerabilities before exploitation.
• Significantly improved detection of advanced threats by tuning FortiWeb WAF policies and deploying custom rules in Microsoft Defender for Cloud.

Junior Hacker-Pentester at AES Corp (2018-12 – 2019-12)

• Secured the LNG power plant's critical infrastructure prior to go-live by designing and implementing strict network segmentation with FortiGate firewalls, eliminating lateral movement paths between ICS components.
• Led penetration testing and social-engineering simulations on plant servers and networks during construction, uncovering high-risk weaknesses and driving remediation before production.
• Deployed Azure-based SIEM and used Microsoft Defender for Endpoint for proactive threat hunting, centralizing monitoring of OT/IT assets during commissioning.

Junior Hacker-Pentester at Namkyong (2016-11 – 2017-12)

• Executed ~6 comprehensive penetration tests across web applications, networks, and systems, driving an estimated 95% reduction in high-risk vulnerabilities before external audits.
• Identified exploitable flaws and enforced remediation plans with IT teams, ensuring critical issues were closed ahead of compliance assessments.
• Helped deploy and configure FortiAnalyzer, centralizing log analysis and significantly reducing threat detection time while improving audit outcomes.

Junior Hacker-Pentester at Costco Korea (2016-01 – 2016-09)

• Performed penetration testing of web apps, Wi-Fi, and operating systems, identifying exploitable vulnerabilities and supporting remediation with IT teams.
• Designed and tested social-engineering and phishing simulations to strengthen user awareness and improve phishing detection rates.
• Evaluated Microsoft Defender Antivirus efficacy on endpoints by safely bypassing controls in a lab environment to enhance detection rules.

Master in AI Generative & Machine Learning – OBS Business School (2024-10)

Offensive Security Certified Professional (OSCP) in Penetration Testing – Offensive Security (2021-12)

Bachelor in Computer Engineering – SunMoon University (2013-02 – 2016-11)

Certificate in Korean Language Institute – SunMoon University (2011-01 – 2012-11)

TOPIK Level 5 in Korean Language (2014-02)