Senior Cybersecurity Engineer at Continental / AUMOVIO (2023-06 – Present)
- Spearheaded compliance, risk mitigation, and vulnerability initiatives within the automotive sector, ensuring alignment with industry security standards.
- Developed and deployed automated vulnerability monitoring tools adopted globally across engineering teams, reducing critical exposure time.
- Conducted rapid triage for emerging vulnerabilities and executed proactive threat hunting operations.
- Monitored, analyzed, and updated real-time vulnerability alerts from global security databases.
- Created comprehensive cybersecurity training programs and maturity KPIs, enhancing the awareness and technical capabilities of global engineers.
- Supported agile release planning, product requirements prioritization, and continuous process improvements to embed security into the development lifecycle.
Delivery Compliance Audit Officer at HCL México (2021-02 – 2023-06)
- Orchestrated end-to-end risk management mitigation, remediation activities, and compliance enhancements for key financial client USAA.
- Managed and executed 11 internal and external security audits for international enterprise clients, ensuring zero major non-conformities.
- Trained over a broad team of technical and operations personnel on audit compliance procedures, data protection regulations, and industry best practices.
- Coordinated closely with cross-functional leadership teams in MX and India to address and close complex audit follow-ups ahead of schedule.
- Key Client: USAA, HCL
IT Manager / Information Security Officer at NAPA México (2017-09 – 2020-09)
- Oversaw global security operations for two GPC subsidiaries in Mexico.
- Attained 100% completion of annual compliance goals with zero major audit findings.
- Designed, launched and executed the corporate IT Security Awareness program.
- Managed advanced persistent threat (APT) mitigation strategies and proactive malware defense.
- Implemented enterprise security technologies from leading providers including Cisco, Symantec, Cloudflare, Sentinel, AlgoSec, etc.
- Assumed additional IT operations responsibilities in 2019 managing budgets, SLAs, and capital infrastructure projects.
- Analyzed and identified emerging security threats to minimize corporate risk.
- Executed the design and successful implementation of 20+ concurrent security projects.
Senior IT Security Consultant at T - Systems México (2012-12 – 2017-08)
- Led the Audit & Compliance group and directed the Computer Emergency Response Team (CERT).
- Developed and implemented comprehensive security policies, standards, and risk management frameworks.
- Managed a diverse portfolio of security projects, including architecture design and pre-sales activities.
- Analyzed complex client network architectures to uncover security gaps, driving continuous improvement and risk reduction across diverse environments.
- Key Clients: Volkswagen, SAT.
Early Career in Cybersecurity at T - Systems México / DGXSecure / MEXIS (2009-02 – 2012-11)
- Held progressive roles including Penetration Tester, Computer Forensics Consultant, Auditor, and IT Security Specialist.
- Conducted structured pentesting across web, infrastructure and wireless environments.
- Performed deep forensic investigations, successfully maintaining the chain of custody and analyzing complex evidence.
- Implemented and maintained corporate IPS, IDS, SIEM and AAA solutions like QRadar, Cisco, TippingPoint, McAfee, Symantec, Cloudflare, Nessus, Qualys, Trendmicro, etc.
- Key Clients: Volkswagen, MAPFRE, National Lottery, BANOBRAS, SAT.
