Felix Ahmet Tapia-Valentin

Executed web application, API, full-stack, AI/GenAI, embedded-system, CI/CD, cloud, network, and telecommunications penetration testing using OWASP, threat modeling, manual exploitation, DAST/SAST validation, and vulnerability-management workflows. Reviewed automated security-testing outputs and manually validated exploitability, authentication/authorization weaknesses, session defects, injection

Performed threat modeling, offensive security testing, penetration testing, incident response, and vulnerability-management automation across AI/GenAI, web/full-stack applications, embedded systems, CI/CD pipelines, cloud, network, and telecommunications environments. Evaluated AI/GenAI behavior with PyRIT, Promptfoo, Garak, DeepTeam, fuzzing, and custom Python workflows; reviewed model responses

Designed and implemented AI cybersecurity architecture integrating agentic workflows, foundation LLMs, data platforms, governance agents, penetration testing, threat modeling, incident response, and vulnerability-management automation. Performed continuous Breach and Attack Simulation with SafeBreach, AttackIQ, Cymulate, Picus, Burp Suite, PyRIT, fuzzing, and Promptfoo to validate control effectiv

Implemented and operated SOC, threat detection, incident response, forensic security, penetration testing, vulnerability management, threat modeling, asset management, and security-control validation programs across enterprise networks, applications, APIs, mobile, embedded, and multi-cloud environments. Performed SOC/DFIR analysis and security investigations using SIEM/SOAR and endpoint/network ev

Led vulnerability and patch-management programs using Tenable, Rapid7, BigFix, SCCM/WSUS, and endpoint controls while performing penetration tests, exploitation assessments, incident response, and security testing. Investigated security events across network, web/full-stack, API, IoT, cloud, and endpoint environments; combined forensic analysis, malware analysis, threat modeling, and vulnerability

Served as security architect for a global IAM environment, implementing provisioning, password-reset, access-control, and identity workflows across multiple domains. Conducted incident response and software-based security testing, including unit, automation, performance, and workflow validation, to identify control defects and verify corrective actions.

Managed an enterprise security program spanning SIEM (Splunk), IDS/IPS, vulnerability management, endpoint security, PKI, network security, firewall assessment, patching, and OWASP-aligned SDLC security. Performed SIEM/security-event review, incident response, penetration testing, vulnerability scanning, malware analysis, threat modeling, and risk analysis to identify malicious activity and contro

Bachelor of Software Engineering in Computer Science from Edinboro University of Pennsylvania.