Francisco Palos

Security Analyst with 3+ years of hands-on experience in vulnerability management, application security, and policy compliance. Proven track record conducting OS, database, API, and web application assessments using industry-leading platforms (Tenable, InsightVM, IBM Guardium, Burp Suite). Skilled in SAST/SCA analysis and CIS benchmark alignment. Strong engineering background (M.Sc. Telecommunications) with software development expertise supporting secure SDLC practices.

Vulnerability Management Analyst at Coppel (2022-05 – 2024-12)

• Managed end-to-end vulnerability lifecycle for 5,000+ assets using Tenable Nessus and Tenable One — scanning Linux/Windows OS, PostgreSQL, MSSQL, MongoDB, REST APIs, and web applications.
• Designed and customized CIS Benchmark audit files for Windows and Linux, reducing non-compliant assets by standardizing hardening baselines across the environment.
• Triaged and prioritized high-severity CVEs in coordination with SOC and threat intelligence teams; translated findings into actionable remediation tickets and stakeholder reports.
• Performed manual web app and API testing with Burp Suite; identified critical pre-production vulnerabilities via SAST/SCA using Checkmarx.
• Enforced database security policies via IBM Guardium across MSSQL, PostgreSQL, MongoDB, and Oracle SQL environments.
• Core tools: Tenable Nessus, Tenable One, Tenable Security Center, InsightVM (Rapid7), IBM Guardium, Checkmarx, Burp Suite, JIRA, Invgate Service Desk.

Software Developer at Paquetexpress (2025-05 – Present)

• Building secure internal logistics and HR applications using Java EE, RESTful services, Oracle SQL, and PostgreSQL; applying AppSec knowledge and AI-assisted development tools to accelerate delivery without compromising code quality.
• Deploying and testing across VMware virtual machines and legacy environments, maintaining hands-on familiarity with virtualization and infrastructure troubleshooting.

M.Sc. in Engineering – Telecommunications – Instituto Tecnológico de Sonora (2020-08 – 2022-02)

B.Sc. in Electronics Engineering – Instituto Tecnológico de Sonora (2014-08 – 2020-07)