Open to opportunities

Diego Múnera

@dim

Message

Security engineer specializing in AWS and hybrid environments, incident response, and enterprise defensive controls.

Colombia

Message

What I'm looking for

I seek a role where I can lead security initiatives, strengthen cloud/hybrid defenses, reduce alert noise, and drive measurable improvements in a collaborative, automation-focused team.

I am a Security Engineer with extensive hands-on experience implementing and supporting enterprise security controls across AWS and hybrid environments, including WAF, firewalls, EDR/XDR, SIEM and cloud security platforms. I have led large-scale initiatives—such as rolling out a proxy to ~18,000 endpoints—and improved detection and response through monitoring, incident management aligned to NIST, and risk-based controls.

My career highlights include preventing critical incidents during a technology spin-off, reducing false-positive alerts by 20% to lower alert fatigue, and coordinating cross-company security programs with measurable KPIs. I hold CEH and CSA certifications, practical knowledge of TOGAF and SAFe principles, and I prioritize continuous improvement, automation, and collaborative execution to strengthen security posture.

Experience

Work history, roles, and key accomplishments

Current

IT Security Squad Coordinator

Current

Holcim-Amrize

Jun 2024 - Present (1 year 9 months)

Lead cross-company security initiatives to standardize and automate controls, preventing critical incidents during a technology spin-off and improving incident response through NIST-aligned processes.

AWS Security SIEM Incident Response WAF Security Automation NIST)

IT Security Specialist

Holcim-Amrize

Dec 2021 - Jun 2024 (2 years 6 months)

Delivered enterprise security controls and managed end-to-end incident response, led a proxy rollout to ~18,000 endpoints and led containment/recovery of a critical incident during a spin-off.

Security Architecture Incident Response Proxy AWS Security SIEM WAF

Cyber Threat Analyst

Digiware

Jul 2020 - Oct 2021 (1 year 3 months)

Collected and correlated multi-source security data to identify exposures and recommend hardening, reducing false positives by 20% and improving response efficiency.

Threat Analysis SIEM Log Analysis Risk Assessment Alert Tuning

Security Support Engineer

Etek

Apr 2018 - Jul 2020 (2 years 3 months)

Diagnosed and troubleshot WAF, firewall and vulnerability manager platforms via log and config analysis, implementing risk-based improvements to reduce vulnerabilities and prevent incidents.

WAF Firewalls Vulnerability Management Log Analysis Change Management Hardening

Post-Sales Support Engineer

ZTE

Mar 2017 - Apr 2018 (1 year 1 month)

Administered monitoring and incident reporting for network devices, adjusted alerts and standardized workflows to support project delivery and operational monitoring.

Network Monitoring Incident Reports Alert Tuning NOC Support Troubleshooting

NOC Engineer

Telintel

Jul 2016 - Mar 2017 (8 months)

Monitored messaging and VoIP systems, performed root cause analysis, resolved incidents, restored availability and implemented measures to reduce recurrence.

Availability Management Alerting