M. Demian Impemba

Conducting phishing campaigns and security awareness training to enhance organizational cybersecurity posture. Administering, migrating, and upgrading Fortinet security solutions, including FortiManager, FortiGate, FortiAnalyzer, FortiClient EMS, FortiSwitches. Performing vulnerability patching and remediation to maintain system security and compliance. Designing the Incident Response Plan and ensuring effective response strategies to mitigate security incidents. Leading and executing independent security projects to improve overall security infrastructure and defense mechanisms. Monitoring security events, analyzing threats, and implementing proactive measures to mitigate risks. Collaborating with teams to improve security policies, configurations, and best practices.

- Investigation, response and reporting of Tier 2/3 security incident escalation from detection operations. - Zero-day & Critical Vulnerabilities handling with assistance in threat hunting activities using external resources while incorporating threat intel sharing platforms such as CIISI-EU, BSI (Federal institution for information Security: Germany), Accenture CTI, MASNET and more. - Leveraging varieties of tools such as SOAR systems (SPLUNK SOAR), EDR/XDR solutions (Sentinel One), ILLUSIVE, SAP system, OTRS, SPLUNK Enterprise Security, SAP CMS (Asset inventory system and ticketing tool), MEGA (Application inventory), MISP, MDE, MDI, AWS, Azure and GCP for execution of quick and effective responses to security Incidents. - Respond to both external and internal threats on the above mentioned potential incidents proactively coordinating with appropriate departments such as upper management, the legal team, security operations, and others in events of any security incident. - Assessment of CISCO Firepower IDS/IPS and Checkpoint IDS/IPS signatures for creation of use cases. - Perform triage, incident severity classification and create detailed reports of all incidents and procedures and notifying stakeholders of findings and resolution. -Attend Webinars and conferences to stay abreast of ATPs and TTPs used in Cyber attacks against financial institutions and other industrial sectors.

As part of the Security Engineer team, I was responsible of the lifecyle of several and diverse Technology and Information Security Projects Management. Review of Technology Processes and Platforms identifying opportunities for improvement in reference to Information Security. Generation of Monitoring Reports and Execution of Remediation Plan. Managing and monitoring Infrastructures on Microsoft platforms (Active Directory, WSUS, GPO, SQL Server). Monitoring and tracking Security Incidents (helped in the creation of the Security Operation Center). As well Certificate Creation and Management. Hardening Windows and MySQL platforms. Also perform weekly Vulnerability Analysis and Management (Nessus). Furthermore Symantec Endpoint Protection server administrator. Worked with ITIL methodology and also alignment of the regulations of the national securities commission (CNV) and the Central Bank of Argentina regulations. Also SIEM (QRadar, Wazuh) implementation and administration, along with Kibana and Elasticseach administration and SWIFT security Administration.

Pre Sales and Post Sales Information Security Engineer for Latin America Clients from both the private and public sector. Deploying solutions from several vendors like Kaspersky (Antivirus, DLP), Paloalto (Next-Generation Firewall, Threat detection and prevention), Sophos (Firewall, Access Point, Antivirus, InterceptX), Symantec (Endpoint protection cloud), VU (Face recognition, Mobile Tokens, Fraud Analysis), as well as some analysis of vulnerabilities, penetration testing and ethical hacking. Prepared technical Pre-Sales presentations, documents and PoCs.

Post Sales Information Security Engineer for Enterprise Clients from both the private and public sector in Latin America. Providing solutions from first tier vendors like Mcafee (gateway, ePO, DLP, antivirus), IpSwitch (Whatsup Gold), Checkpoint (UTM, Firewall) Administration and daily configuration for McAfee (ePO, antivirus) and IBM (QRadar, Appscan) products, as well as some analysis of vulnerabilities, penetration testing and ethical hacking.

• Daily contact and exchange of information with the systems assistance center in Manila. • Exchange Management Console Administration • Active Directory Management • LAN and WAN configuration and support. • BES server and platform management • Platform management IDENTIKEY Authentication • Server management for printers • Installation and Support of Hardware, Software and Printers • Mobileiron platform management • Trend Micro OfficeScan platform management

• Hardware and Software Support • Mitrol System Administration • VoiceIP configuration

• On site support, for various companies in La Plata and surroundings.

• Hardware and Software Support.

• Support, wiring and installation of IP security cameras.