Pedro Alexander Leon Valencia CTO,CISO, CyberSecurity IT, CISSP, CISM, CISA,

C

Consultor senior ciberseguridad

Sep 2024 - Current (1 year 8 months)

Como Consultor Senior en Ciberseguridad, fui responsable de diseñar e implementar estrategias de seguridad robustas para proteger la infraestructura de TI de la organización. Esto incluyó la evaluación de riesgos y la aplicación de estándares como ISO/IEC 27001 y el marco de OWASP Top 10 para garantizar la seguridad de las aplicaciones. Además, gestioné la configuración y el mantenimiento de firewalls perimetrales y sistemas de monitoreo de seguridad (SIEM) para detectar y responder a incidentes de seguridad de manera efectiva. Integré prácticas de hacking ético y utilicé mis certificaciones como CEH y CISSP para realizar auditorías de seguridad y pruebas de penetración. También colaboré en el proceso de ingeniería de software, asegurando q

Cloud support Manager regional

Whitestack

Feb 2023 - Dec 2023 (11 months)

Como Cloud Support Manager Regional, fui responsable de liderar el soporte técnico y la gestión de la infraestructura en la nube, asegurando la disponibilidad y el rendimiento óptimo de los servicios. Implementé soluciones en OpenStack, AWS y Kubernetes, y utilicé herramientas como Ansible para la automatización de procesos. Además, supervisé la seguridad de la información y la gestión de incidentes, aplicando mis conocimientos en CISSP y GDPR para garantizar el cumplimiento normativo. Aunque la ingeniería de software fue identificada como una habilidad no relevante, la apliqué en la integración de productos de la compañía con diversas plataformas y en la implementación de despliegues CI/CD, lo que mejoró la eficiencia operativa y la calida

Chief Technology Officer and CISO

Sistemas Expertos e Ingeniería de Software Ltda.

Sep 2021 - Current (4 years 8 months)

- As Chief Technology Officer and CISO, I managed IT processes encompassing both local and Cloud platforms, as well as internal infrastructure, ensuring alignment of contracts with business objectives and strengthening processes in accordance with ISO 27001 and ITIL standards. - I leveraged my expertise in security architecture and cloud architecture to enhance our security posture, while also implementing best practices from the OWASP Top 10 to mitigate vulnerabilities. - Additionally, I utilized my knowledge of Oracle Database to audit health system databases, ensuring compliance and security across our data management practices. - My role also involved overseeing incident management and performance monitoring, while fostering a cultur

I

Senior Manager, CyberSecurity IT/OT

Insitel SAS

Aug 2019 - Apr 2021 (1 year 9 months)

- business models generation in the cybersecurity area, big data and machine learning coordinate CyberSOC services and specialized consulting on digital transformation issues Lead the cybersecurity group and analytics engineers business models generation in the cybersecurity area, big data and machine learning coordinate CyberSOC services and specialized consulting on digital transformation issues Lead the cybersecurity group and analytics engineers

Chief Technology Officer and CISO

Sistemas Expertos e Ingeniería de Software Ltda.

Nov 2017 - Jul 2019 (1 year 9 months)

- Manage IT processes that included our local and Cloud platforms and internal infrastructure, alignment of contracts with business objectives, strengthening of processes aligned to ISO 27001 and ITIL. Santiago RM Manage IT processes that included our local and Cloud platforms and internal infrastructure, alignment of contracts with business objectives, strengthening of processes aligned to ISO 27001 and ITIL. Improvements in the architecture of our clients and in the technology administration processes aligned with good DevSecOps practices.

H

CEO Chief Executive Officer

Hackingconsulting S.A.S

Aug 2017 - Jan 2018 (6 months)

- As the CEO, I managed the cybersecurity services portfolio, ensuring the implementation of robust security measures across all operations. - Oversaw ethical hacking initiatives, SIEM implementations, IT audits, and application security protocols to safeguard organizational assets. - Developed and delivered training programs to enhance team capabilities in cybersecurity practices, including advanced Linux systems, where I served as an instructor, sharing my knowledge to improve operational efficiency and security management. - Additionally, I reviewed software engineering architectures and applied best practices in application security, leveraging my expertise in security architecture and information system engineering to strengthen our

Senior Engineer

Neosecure

Jan 2016 - Jul 2017 (1 year 7 months)

- Implementation and management of highly complex projects, adoption of new technology and integration of solutions, research in cutting-edge tools and techniques in the field of cybersecurity. Implementation and management of highly complex projects, adoption of new technology and integration of solutions, research in cutting-edge tools and techniques in the field of cybersecurity. Instructor CISSP ISC(2)

Operative Security Manager MSSP

Novared

Jan 2014 - Aug 2015 (1 year 8 months)

- Application of Information Security Models and Architectures, management to Security Incidents, specialized training Information Security and platforms Application of Information Security Models and Architectures, management to Security Incidents, specialized training Information Security and platforms

h

CEO-Chief Executive Officer

hackingconsulting

Jan 2013 - Jan 2017 (4 years 1 month)

- As CEO, I managed the cybersecurity services portfolio, overseeing ethical hacking initiatives, SIEM implementations, IT audits, application security, and training programs to ensure robust security measures across the organization. - Leveraged my expertise in security architecture and information system engineering to enhance our cybersecurity framework, ensuring compliance with General Data Protection Regulation (GDPR) and ISO/IEC 27001 standards. - Additionally, I utilized my advanced Linux knowledge to instruct teams on best practices for system security, while also integrating Oracle Database security measures into our overall strategy, thereby strengthening our data protection protocols and enhancing our service offerings.

E

Chief Information Security Officer CISO

Enlace Tecnológico de Negocios

Sep 2010 - Dec 2012 (2 years 4 months)

- As Chief Information Security Officer (CISO), I led the implementation of comprehensive computer security architectures, ensuring robust protection of organizational assets. - Conducted thorough risk analyses, business impact assessments (BIA), and disaster recovery planning (DRP) to identify vulnerabilities and enhance our security posture. - Spearheaded the implementation of ISO 27001 standards, configuring critical security systems including IPS, SIEM, and antivirus solutions to safeguard our technological infrastructure. - Executed server and network device hardening initiatives, complemented by vulnerability assessments and penetration testing to proactively address security gaps. - Managed internal information security audits an

C

Project Manager

CHK GROUP

Jan 2009 - Jul 2009 (7 months)

- manage projects for the implementation of technological solutions offered by the company Coordinate personnel according to the implementation schedule manage projects for the implementation of technological solutions offered by the company Coordinate personnel according to the implementation schedule

support engineer level 3

ROR Ingenieria S.A

Jan 2008 - Feb 2009 (1 year 2 months)

- As a Support Engineer Level 3, I specialized in IP Telephony Configuration under Asterisk, ensuring seamless communication solutions for clients. - I was responsible for the configuration and troubleshooting of routers, LAN switches, wireless networks, and Cisco ASA firewalls, as well as managing both Linux and Windows platforms and databases. - My role also involved effective customer management, where I provided technical support and guidance to enhance user experience. - Additionally, I utilized Security Information and Event Management (SIEM) platforms to monitor and support network security, ensuring that our systems remained robust and secure against potential threats.

s

Hardware Enginner

sumset ltda

Jan 2007 - Jan 2008 (1 year 1 month)

- Designed and implemented innovative hardware solutions utilizing Java, Asterisk, and microcontrollers, ensuring optimal performance and reliability. - Provided comprehensive product support, addressing technical issues and enhancing user satisfaction. - Managed technology purchases to align with project requirements and budget constraints. - Integrated hardware systems with Oracle Database, leveraging database management skills to enhance data handling and system efficiency, thereby improving overall project outcomes.

Pedro Alexander Leon Valencia

About

Detail

Timeline

Résumé

Pedro Alexander Leon Valencia new_releases

About

Detail

Pedro Alexander Leon Valencia