Germán Darío Baquero Salamanca

I’m a Senior Security Engineer with 9+ years of experience in Vulnerability Management, Application Security, Cloud Security, and Security Operations supporting large-scale SaaS and cloud-native environments. I focus on strengthening security outcomes across the full vulnerability lifecycle—identification, triage, remediation validation, and closure—while aligning work to measurable risk and compliance needs.

In vulnerability management roles, I’ve led enterprise vulnerability lifecycle programs across cloud, infrastructure, and application environments. I reduced critical vulnerabilities by 40% and improved remediation MTTR by 30% through risk-based prioritization using CVSS, exploitability, asset criticality, and business impact. I also built security metrics, remediation dashboards, and executive reporting to track SLA compliance, remediation performance, and organizational risk exposure.

On the cloud side, I manage cloud security posture management (CSPM) and remediation governance for Azure and AWS environments, including Microsoft Defender for Cloud for identifying cloud misconfigurations and security gaps. I partner with Infrastructure, Cloud/DevOps, and engineering teams to coordinate patch management activities, remediate issues in accordance with SLAs, and strengthen Identity and Access Security with IAM, MFA adoption, privileged access management, and Zero Trust security initiatives.

I also drive Application Security through OWASP Top 10 / OWASP ASVS, secure SDLC practices, and threat modeling (STRIDE). I support secure code reviews and security design reviews, conduct SAST/DAST/SCA assessments, and integrate security testing into CI/CD pipelines using DevSecOps practices so vulnerabilities are found and addressed earlier. I complement this with threat intelligence analysis and MITRE ATT&CK mapping to improve exposure analysis and remediation against actively exploited threats.