Cesar Diaz

Right now, I serve as an Offensive Security Coordinator at Promerica Bank, where I lead offensive security strategies to strengthen the organization’s cybersecurity posture. I coordinate targeted penetration tests on critical banking infrastructure and oversee the vulnerability management lifecycle with alignment to OWASP, NIST, and MITRE ATT&CK. I also integrate vulnerability management tracking and penetration testing findings into custom PowerBI dashboards, giving executive leadership enhanced visibility and data-driven decision-making.

Previously, as Manager of IT Security and Monitoring at the Ministry of Environment and Natural Resources (MMARN), I led and mentored a dedicated IT Security and Monitoring team of 3 professionals. I designed, implemented, and maintained robust security processes tied to strategic cyber risk management goals, and I organized comprehensive cybersecurity awareness and training campaigns to reduce human-centric security risks across staff. I focused on continuous improvement in cybersecurity and information security processes.

At the National Cybersecurity Center DR (CNCS), I worked as a Cybersecurity Operations Analyst within CSIRT-RD, supporting high-impact incident response across multiple state institutions. I developed a specialized self-assessment platform based on the NIST CSF framework to benchmark and improve security posture, and I performed cyber threat intelligence analysis and continuous monitoring to identify and neutralize emerging risks at a national scale. I also authored technical reports, security alerts, and best practice guides, and contributed to vulnerability assessments and penetration tests.

Earlier in my career as a Jr. Cybersecurity Audit Consultant in the Red Team Audit Department at Devel Group, I conducted vulnerability analysis and penetration test audits and delivered actionable reports to stakeholders. I’ve built my foundation through hands-on security auditing (including Wi-Fi network security audits and PCI DSS controls), incident response support, and technical reporting. I bring a forward-looking approach—combining certified offensive capabilities (e.g., Burp Suite) with strong operational security thinking, and an interest in incorporating AI and data analytics into cybersecurity strategies.