Francisco Galvis Jimenez
Cybersecurity Analyst
Professional profile
Cybersecurity professional ( in progress ) focused on offensive security , Red Team operations , and penetration testing . Skilled in vulnerability analysis , attack simulation , and frameworks like MITRE ATT & CK and OWASP . Strong communicator bridging technical and management teams
Work experience
Executed phishing simulations, penetration testing of APIs, vulnerability analysis in DevOps (SonarQube, AWS Inspector), social engineering, and led cybersecurity controls and ISO/IEC 27001:2022 certification.
Major achievementLed cybersecurity strategy, penetration testing, phishing simulations, vulnerability analysis, and ISO/IEC 27001:2022 certification alignment.
Technical vulnerability management (InsightVM, Qualys), server hardening (Windows, Solaris, RHEL), Active Directory and GPO administration, patch management, and compliance support.
Major achievementManaged vulnerabilities, server hardening, Active Directory administration, and compliance support.
Penetration testing (cloud, APIs), vulnerability identification and prioritization, ISO 27001:2022 certification coordination, incident response, log analysis, and secure development training.
Major achievementPenetration testing on AWS, vulnerability analysis, ISO 27001:2022 coordination, incident response.
Education experience
Universidad distrital francisco jose de caldas | Técnico/Tecnólogo
