Looking for a job

Diego Concha

@diegoconcha

Message

Senior Security Engineer focused on secure systems, scalable risk reduction, and cross-functional security leadership.

Chile

Message

What I'm looking for

I’m looking for a security engineering role where I can solve problems, improve security at scale, and collaborate with strong engineering teams.

Senior cybersecurity professional and Computer Science Engineer with experience leading security initiatives across engineering, architecture, risk management, and offensive security. I focus on understanding complex systems, identifying structural security risks, and designing practical solutions that improve resilience, maintainability, and security at scale.

My background combines hands-on security engineering with technical leadership, stakeholder communication, and collaboration across engineering, infrastructure, cloud, and business teams. I have led multidisciplinary engagements, supported strategic security decisions, and translated complex risks into clear technical priorities and measurable remediation plans. I also bring experience in cybersecurity education, threat intelligence, and established frameworks such as NIST, ISO 27001, and OWASP.

Experience

Work history, roles, and key accomplishments

Red Team Lead & Cybersecurity Services Lead

Pretorian TI

Apr 2025 - Dec 2025 (8 months)

Led the Red Team function and cybersecurity services practice, delivering offensive security assessments and adversary emulation engagements across web applications, APIs, infrastructure, Active Directory, and cloud environments. Scoped services with clients and produced technical and executive-level deliverables.

Red Team Offensive Security Adversary Emulation Web Application Security API Security Active Directory Cloud Security Penetration Testing Security Assessments

Head of Adversary Emulation & Threat Intelligence

Chap Cyber Intelligence

Oct 2021 - Mar 2025 (3 years 5 months)

Led cyber threat intelligence, adversary emulation, and offensive security initiatives, combining threat research and Red Team activities to help clients reduce real-world cyber risk. Conducted threat investigations and delivered technical and executive-level intelligence reports.

Threat Intelligence Adversary Emulation Red Team OSINT Malware Analysis Phishing Analysis Incident Response Risk Management