Carlos A.

ABOUT ME

I am an specialist with certifications recognized by the market such as CEH (Certified Ethical Hacking), CISSP (Certified Information Systems Security Professional) and ITIL Foundation V3, guarantee the use of validated methodologies for the identification and exploitation of internal and external vulnerabilities (Penetration Test ), and internal and external vulnerability (ASV) scans required by PCI DSS regulations. On the other hand, I execute Social Engineering tasks (such as Ethical Phishing and Pretexting) since I understand that the "User is the weakest link". This task is completed with an awareness talk that allows users to perceive the risks to which they are exposed. Additionally, I execute risk analysis based on the MAGERIT methodology.

I have worked in the financial field, Retail, Telcos, Tourism and Health, which guarantees the experience and quality of the services provided. I have certifications as Lead Auditor in ISO 27001 and CISA (Certified Information Systems Auditor) which allows me to use certified methodologies in order to assess the risk of our clients. I m expert in regulations and standards such as PCI DSS (Standard for merchants that handle payment card data), ISO 27000, BCRA 5374 Y 6354, HIPAA, GDPR (Personal Data Protection Act of the European Union) .

Each of the developments respects safe development methodologies such as OWASP and S-SDLC which guarantees that the developments comply with the best practices and are protected against different types of vulnerabilities.

I promotes the implementation of third-party source code reviews, with the aim of detecting vulnerabilities and bugs in the development of our clients.

I promotes the use and generation of automated tools that help the clients reduce inherent risks, and raise awareness among users.

SKILLS

EMPLOYMENT HISTORY OUTSIDE OF TOOGIT

CEO

ATEITIS - Jan, 2017 to present, Buenos Aires

EDUCATION HISTORY

Engineer's degree, Computer engineering

(2009 - 2017) U.A.I