Leonardo O.

About Me

I am an expert Security Engineer with a broad understanding of hardware and software systems, IT security tools and modern security best practices. I identify and design solutions to deliver new features, work on vulnerabilities and apply adequate security measures to solutions on projects. I support teams that design solutions to impact the overall security posture of products - enhancing security, privacy and compliance.

Backend

DevOps

QA & Testing

Other

Work history

UpStack
UpStack
Senior Security Engineer
2022 - Present (3 years)
Remote
  • Design, implement and maintain secured software solutions to achieve security and compliance objectives.

  • Automate security process flows on projects to ensure the security of system architecture for clients.

  • Develop viable governance and pragmatic guardrails to secure processes and improve threat hunting capabilities.

Globant
Globant
Senior Ethical Hacker
2021 - 2022 (1 year)
Córdoba, Argentina
  • Collaborated and led processes on continuous improvement efforts across different penetration tests on projects.

  • Acted as an expert on code audits and undertook vulnerability assessments for cloud and on-premises environments.

  • Established technical standards, drove security engineering practices and built high-quality solutions on projects.

Atos
Atos
Senior Security Engineer
2015 - 2021 (6 years)
Córdoba, Argentina
  • Led the transition team to manage on-cloud client infrastructure, incident management tasks and data centre migrations.

  • Actively participated in CEH, CISSP, CompTIA PenTest and Security training to deliver high-quality solutions on projects.

  • Drove the system of checks, balances, and fail-safes that protect data centres and servers from risk during migration.

ISLC
ISLC
Senior Security Engineer
2015 - 2021 (6 years)
Córdoba, Argentina
  • Performed technical security assessments, risk assessments, and penetration tests in different environments for clients.

  • Developed technical recommendations to address issues uncovered during assessment using industry standards.

  • Provided continuous assistance post-assessment to help customers build and improve their security programs.

CEDI Consulting & Training
CEDI Consulting & Training
Senior Security Engineer
2015 - 2021 (6 years)
Córdoba, Argentina
  • Conducted technical investigations on security-related incidents to identify causes and recommend future mitigation strategies.

  • Provided security solutions on projects for clients to ensure conformity with the latest security policy and standards.

  • Designed, documented, tested, maintained and provided issue resolution recommendations for highly complex security solutions.

Poder Judicial de la Provincia de Córdoba
Poder Judicial de la Provincia de Córdoba
Sr. System Administrator / Sr. Security Administrator / Datacenter Administrator
2013 - 2021 (8 years)
Córdoba, Argentina
  • Owned and managed the security configurations of Poder Judicial Córdoba's ecosystem - handling different solutions and products.

  • Assessed, mapped, and devised solutions to protect an evolving threat landscape as operations scale and grow in complexity.

  • Converted technical risks on the platform into tangible business goals using 3rd-party solutions to enforce a standardized security position.

Xerox
Xerox
Infrastructure Management Principal – VMwareEngineer
2013 - 2015 (2 years)
Córdoba, Argentina
  • Oversaw activities to onboard new clients and data centre migrations - handling support, research, analysis and implementation of solutions.

  • Transitioned servers to virtualised platforms - working on system testing, OS upgrade and software patch installation.

  • Provided technical support and resolved complex issues in real-time during server migration tasks and processes.

ACS
ACS
Senior System Administrator
2011 - 2013 (2 years)
Córdoba, Argentina
  • Supervised migrations, upgrades and patch management procedures - working on hardware and software requirements on solutions.

  • Provided top-notch on-call and help desk support and configured solutions to perform incident management.

  • Designed and deployed post patching scripts to maintain server services after post patching and server reboots on projects.

Hewlett Packard Enterprise
Hewlett Packard Enterprise
System Administrator
2009 - 2011 (2 years)
Córdoba, Argentina
  • Designed, developed and implemented different solutions for big production environments using Wintel / ESX build servers.

  • Built and deployed Windows servers using iLO and Drac for remote management services on projects.

  • Configured and troubleshot vShpere 4.1 and Windows servers and handled Center and VM installations for clients.

Networking Devices
Networking Devices
Networking Administrator / Penetration Tester
2008 - 2008
Río Grande, Argentina
  • Designed and implemented solutions to prevent network and system vulnerabilities on projects.

  • Detected and corrected system weaknesses - securing wired and wireless networks for clients.

  • Handled Metasploit penetration tests to discover and prevent vulnerabilities using Nessus scanners.

Municipalidad TDF
Municipalidad TDF
System Administrator
2006 - 2008 (2 years)
Río Grande, Argentina
  • Administered, monitored and troubleshot Windows servers, DCS workstations and Active Directory.

  • Maintained the Windows XP environment, ensured proper user support and enhanced networking security on the project.

  • Managed patching processes and implemented vulnerability prevention solutions for clients.

DINS
DINS
System Administrator
2001 - 2003 (2 years)
Río Grande, Argentina
  • Configured, installed, troubleshot and maintained Windows servers.

  • Managed and established the Exchange Server environment for DINS.

  • Enforced Active Directory management on the project.

Showcase

Senior Security Engineer - Black Box Test
Senior Security Engineer - Black Box Test
  • Simulated environment takeovers for websites, mobile apps, and system infrastructure.

  • Performed penetration testing with attacks to access workstations and servers.

  • Delivered a report with findings and recommendations for vulnerabilities.

Senior Security Engineer - Solution to Detect System Attacks
Senior Security Engineer - Solution to Detect System Attacks
  • Identified and exposed various attack vectors targeting the project, including brute force, password sprays, system environment attacks, accounts, Exchange, OWA, AD, and Kerberos attacks.

  • Deployed specialized tools like WEF, Sysmon, and Elasticsearch to detect these attacks and create a real-time dashboard for system administrators.

  • Implemented a single dashboard to facilitate the discovery and remediation of security incidents.

Senior Security Engineer - VM Farm Management
Senior Security Engineer - VM Farm Management
  • Automated VM creation using Power CLI and PowerShell.

  • Scripted VM deployment including Windows deployment services.

  • Implemented backup scripts for VMware backups.

Education

Solaris System Administration
Solaris System Administration
Capacitacion IT
2009 - 2010 (1 year)
English Training Teaching College
English Training Teaching College
UTN Río Grande
2002 - 2004 (2 years)
System Analyst
System Analyst
ISES
2000 - 2002 (2 years)