Guido Ivan Garcia

Conducts penetration testing and attack simulations on critical infrastructure to identify and remediate security vulnerabilities. Explores potential attacker techniques, automates testing processes, and develops standard toolsets. Verifies exploitable targets and completes detailed threat assessment reports to present findings to management.

Perform external, internal, physical, wireless, web, API, and SOC vulnerability assessments and penetration testing on Fortune 500 companies. Create scripts, tools, or methodologies to enhance offensive security capabilities. Work with the security development team and application security to improve and automate application security assessments.

As a Security Engineer at Wazuh, I specialized in deploying, customizing, and maintaining software solutions for international clients' security needs, driving innovation in security features and aligning solutions with stringent requirements. Through technical presentations, I educated stakeholders and empowered them for independent utilization. Within the Wazuh community, I served as a security expert, actively mentoring teams in threat mitigation strategies.

Conduct Web application, API, and Mobile Application penetration testing. Perform information technology security research to remain current on emerging technology trends and develop exploits for disclosed and undisclosed vulnerabilities. Utilize platforms and tools such as Kali Linux, Parrot OS, Metasploit Framework, Nessus, Acunetix, MobSF, Genymotion, Nmap, Sqlmap, Burp Suite, and Cobalt Strike.

Development of new functionalities, application support, corrective and evolutionary maintenance, CI/CD, Microservices, React, Redux. Working for a Government Agency was a challenge in terms of development agility vs organizational status quo which we tackled as a team trying to drive change from our corner into the rest of the organization.

Development of new functionalities in PHP, MySQL and web technologies (HTML5, CSS3), Bootstrap 4.1.0. Testing of the developed elements. Development of technical documentation

Development of new functionalities for the Management System. Testing of the elements and correction of errors developed remotely.