Open to opportunities

Esteban Araya

@estebanaraya

Message

I assess cyber and AI risk for financial-sector organizations and strengthen security controls.

Costa Rica

Message

What I'm looking for

I'm looking for opportunities at the intersection of cyber risk, AI governance, and GRC, where I can assess security risks, strengthen control frameworks, build responsible AI practices, and communicate clearly with technical and executive stakeholders.

At TechCore Group, I conduct cyber risk and security-maturity assessments for enterprise and financial-sector clients across cloud infrastructure, applications, APIs, and internal platforms. I raised one client’s cyber-resilience score from 70% to 90% by identifying, prioritizing, and tracking risks through remediation.

I assess AI risks including prompt injection, model misuse, adversarial threats, and data governance, while building and evaluating guardrailed AI and agentic tooling. I map and test controls against NIST CSF, ISO 27001, and CIS Controls, prepare audit-ready evidence, and translate technical risk into clear guidance for engineering, product, and executive stakeholders.

I also teach cybersecurity and networking fundamentals through INA-MICITT and bring global team leadership experience from Amazon Corporate.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Lead (Risk, Assessment & AI)

Current

TechCore Group

Mar 2024 - Present (2 years 5 months)

Conducts risk and security-maturity assessments across cloud, applications, and APIs for enterprise and financial-sector clients, mapping controls to NIST CSF, ISO 27001, and CIS Controls. Assesses AI-related risks from a red-team perspective and advocates responsible AI use.

AI Risk Management GRC NIST CSF ISO 27001 CIS Third Party Risk Vulnerability Management IAM Application Security Cloud Security Azure AWS GCP Python BASH PowerShell SQL Prompt Injection AI Governance

Current

Cybersecurity & Networking Instructor

Current

INA-MICITT (Cisco Networking Academy)

Jan 2024 - Present (2 years 7 months)

Teaches security and networking fundamentals, translating complex technical concepts for non-technical and mixed audiences.

Cybersecurity Networking Teaching

Training Manager / Team Manager

Amazon Corporate

Jun 2015 - Dec 2021 (6 years 6 months)

Led teams of 15+ in a global, distributed, fast-paced organization, building a strong foundation in documentation, cross-functional collaboration, and stakeholder communication.

Team Leadership Documentation Cross Functional Collaboration Stakeholder Communication