Open to opportunities

Antonio Ortiz

@antonioortiz1

Message

Cybersecurity engineer specializing in offensive security and secure cloud infrastructure.

Mexico

Message

What I'm looking for

I seek roles where I can lead offensive security and cloud-hardening initiatives, mentor teams, drive compliance, and reduce organizational risk.

I am a cybersecurity engineer with 4+ years focused on offensive security and cloud infrastructure protection, who has led large-scale penetration testing programs and advised CISO-level stakeholders to translate technical findings into business risk and remediation. I have architected compliance programs (GDPR, ISO 27001, SOC 2), hardened AWS/GCP environments, and built automation for secure SDLC pipelines.

My hands-on experience includes running 200+ offensive engagements, mentoring junior pentesters, implementing security guardrails that removed critical cloud misconfigurations, and orchestrating incident response to reduce MTTR. I combine practical pentesting skills with cloud security architecture and compliance expertise to help global enterprises reduce attack surface and meet regulatory requirements.

Experience

Work history, roles, and key accomplishments

Pentesting Supervisor

Deloitte Touche Tohmatsu Limited

Apr 2023 - Mar 2025 (1 year 11 months)

Led 200+ offensive security engagements, identified critical vulnerabilities and drove client remediation plans that reduced attack surface; advised CISO-level stakeholders and managed complex testing projects end-to-end.

Offensive Security Penetration Testing Burp suite Nmap Metasploit Cloud Security Vulnerability Management

IT Security Analyst

Laureate Education

Apr 2022 - Mar 2023 (11 months)

Architected and implemented GDPR, ISO 27001 and SOC 2 Type II compliance programs achieving certification and hardened AWS/GCP infrastructure, eliminating over 90% of critical misconfigurations.

& Compliance ISO 27001 SOC 2)GDPR AWS Security GCP Security Cloud Guardrails Incident Response

IT Systems Analyst

NXP Semiconductors

Jan 2021 - Feb 2022 (1 year 1 month)

Engineered automated DevSecOps security pipelines integrating SAST/DAST and developed automation scripts for system hardening and patch management across Linux servers, accelerating secure SDLC delivery.

DevSecOps SAST DAST Python BASH Automation)System Hardening CI CD Automation

Education

Degrees, certifications, and relevant coursework

ITESO, Universidad Jesuita de Guadalajara

Bachelor of Engineering, Information Security & Networks Engineering

2017 - 2022

Activities and societies: 1st Place, Hackathon Hack to Solve (2019)

Completed a Bachelor of Engineering in Information Security & Networks Engineering with coursework and projects focused on network security, secure systems design, and applied cybersecurity practices.