alex@cybersec:~$ dataprofile.pymsf6 > load operator_profile
=================[ Alex Alcivar Moya ]=================
Operator Role : Cybersecurity Analyst
Background : Information Technology Engineering
=======================================================
Core_Areas
[+] iam/identity_access_management
[+] network/infrastructure_security
[+] vuln/vulnerability_management
[+] soc/security_operations
[+] itsm/service_management
=======================================================
Security_Domains
[+] blueteam/threat_detection
[+] redteam/offensive_security
[+] grc/security_compliance
=======================================================
Career_Direction
[*] Security Manager
[*] Cybersecurity Leadership
[*] Red Team / Offensive Security Depth
=======================================================
Module Status : READY
=======================================================
I'm an Information Technology Engineer working in cybersecurity, with hands-on experience in identity and access management, infrastructure security, vulnerability management, security operations and ITSM.
I approach security from both the technical and the operational side: understanding the environment, identifying risk, analyzing events and vulnerabilities, improving controls and automating repetitive work.
Outside of work I build isolated labs to practice adversary emulation, detection engineering, honeypots, network segmentation and security monitoring. I'm developing toward a stronger Red Team / Offensive Security profile while keeping a solid foundation in defensive security, IAM and infrastructure protection, with the long-term goal of leading security teams and initiatives.
The following technologies represent tools I have used, administered, supported, tested or studied throughout professional engagements, laboratory environments and continuous learning activities.
| Area | What I do | Tools |
|---|---|---|
| Identity & IAM | Active Directory and LDAP environments, identity lifecycle, user synchronization, access management | Active Directory, LDAP, Microsoft 365 |
| Infrastructure Security | Network security controls, firewalls, segmentation and infrastructure protection | FortiGate, FortiManager, FortiNAC, UniFi |
| Vulnerability Management | Vulnerability analysis and prioritization, bulletin monitoring, remediation follow-up, review of ethical hacking results, validation of mitigations with stakeholders | Qualys VMDR, HaloSecurity / TVM |
| Security Operations | Alert triage, IOC analysis, false-positive identification, event investigation, phishing campaign analysis and metrics | Cortex XDR, Sophos |
| ITSM | Incident and service request management, SLA-oriented workflows, ticket categorization, forms and workflow customization | Jira Service Management, GLPI |
| Security Automation | Standardizing and automating repetitive administrative and security tasks | PowerShell |
The following platforms have been used in laboratory environments, academic projects, research activities, adversary emulation exercises and continuous learning initiatives.
| Learning & Testing Platforms |
|---|
              |
Important
Experience levels vary by platform. Some technologies have been used extensively in production environments, while others have been explored through labs, assessments, academic work and continuous learning initiatives.
| Project | Description | Stack |
|---|---|---|
| Medium-Interaction Honeypot Lab | Academic project focused on the early detection and analysis of cyberattacks in a simulated corporate infrastructure. Uses network segmentation and isolated services to study attacker behavior and security events without exposing production systems. | pfSense · Cowrie · Glastopf · Wazuh · Snort |
| MITRE CALDERA Adversary Emulation Lab | Isolated laboratory to experiment with adversary emulation and validate techniques based on the MITRE ATT&CK framework. Includes Active Directory, Windows endpoints, Linux systems and a dedicated CALDERA server. | MITRE CALDERA · Sandcat · Windows Server · Windows 11 · Active Directory · Kali Linux |
| Automation Toolkit | Collection of utilities for IT operations, infrastructure automation and security-oriented workflows, focused on standardizing repetitive administrative tasks. | PowerShell · Windows |
| Web Service AutoRecovery | PowerShell automation that monitors HTTP endpoints, detects failures and performs controlled service recovery with post-validation. | PowerShell · HTTP Health Checks · Windows |
| Local Security Monitoring Console | Python-based tool that identifies potentially suspicious activity, including processes, network connections, DNS behavior, users and system paths. Designed with future AI-assisted analysis capabilities. | Python · VirusTotal · Security Automation |
| Windows System Automation Utilities | Windows administration and maintenance utilities for software deployment, removal and system optimization workflows. | Batch · PowerShell · System Administration |
I'm building practical understanding of how security requirements translate into technical controls: control validation, vulnerability remediation, risk identification and treatment, security policies and audit readiness.
.png)
Cybersecurity
├── Identity & Access Management
├── Vulnerability Management
├── Threat Detection & Analysis
├── Infrastructure Security
├── Security Automation
├── GRC & Security Controls
└── Adversary Emulation
│
└── Red Team Development
│
└── Security Leadership
I keep building hands-on labs and security tooling to bridge infrastructure operations, defensive security and offensive security.
In the near term, my focus is technical depth in Red Team / Offensive Security. In the long term, my goal is to lead cybersecurity teams and initiatives: understanding how systems are built, how they are attacked, how attacks are detected and how controls are governed is the foundation for effective security leadership.
Build. Break. Detect. Learn. Automate. Lead.