Yasmin E

Industrial Electronics Engineer (B.S.) and M.Sc. in Computer Science with consolidated experience in Cybersecurity. Specialized in evaluating Cloud architectures, integrating security principles into the Software Development Life Cycle (SDLC), and supporting the implementation of GRC (Governance, Risk, and Compliance) programs. Proven experience analyzing threats using MITRE ATT&CK and OWASP best practices, managing vulnerabilities using CVSS metrics, and ensuring successful audit compliance under NIST, ISO 27001 standards.

Data Engineer at Etribe (2025-05 – Present)

• Cloud Architecture Evaluation: Evaluated and designed technology architectures in AWS (Cloud and on-premise), implementing robust security controls for data pipelines (ETL) to achieve high availability and resilience across operating systems and databases.
• Microservices & API Security: Implemented advanced network configurations, secure communications, and role-based access controls in the cloud, successfully aligning cloud resources with industry cybersecurity best practices.
• Traceability & Governance: Led the secure migration of local workflows to Cloud environments, meeting the objective of preserving data integrity, confidentiality, and traceability in accordance with applicable regulations.

QA Security Engineer at CSIRT - CIC/IPN (2024-08 – 2026-06)

• Vulnerability Management & CVSS: Managed and tracked critical vulnerabilities across infrastructure and applications, assessing risks using CVSS scoring and prioritizing mitigation plans to ensure the timely remediation of threats and strengthen the overall security posture.
• Security Auditing & GRC: Designed and maintained evidence-based risk control matrices for internal and external audit processes, successfully achieving exact traceability between technical findings and remediations to meet regulatory standards.
• Metrics & Reporting: Automated secure configuration validation using Python and OpenSCAP, creating executive reports, technical reports, and security dashboards to provide leadership with clear visibility into compliance status and facilitate strategic decision-making.

Cloud security engineer at PICS Project - CIC/OEA (2023-01 – 2024-12)

• System & Environment Controls: Built robust cloud environments using Infrastructure as Code (IaC), achieving secure and hardened operating systems (Linux/Windows) and well-protected containerized workloads (Kubernetes/Docker).
• ISO 27001 & NIST Compliance: Proactively aligned technology infrastructure configurations with NIST and ISO 27001 frameworks, successfully fulfilling the foundational requirements for internal regulatory compliance programs.
• Zero Trust Architecture: Deployed Zero Trust architectures and configured Google Cloud IAM for centralized identity management, effectively mitigating risks related to unauthorized access and potential data breaches.

M.Sc. in Computer Science – Centro de Investigación, IPN (2026)

B.S. in Industrial Electronics Engineering – Instituto Politécnico Nacional (2022-12)