Lisa Marie Moreno

MSSP environment supporting multiple enterprise clients across Microsoft security stack.

- Actively reduced alert fatigue by identifying and escalating high-frequency false positive patterns, contributing to measurable noise reduction across monitored environments
- End-to-end alert triage and investigation covering malware, phishing, and suspicious activity using Microsoft Defender XDR, Sentine

Designed and operates a full SOC lab: Wazuh SIEM (v4.14), Trend Micro Vision One XDR, Shuffle SOAR, Microsoft Defender 365, and Microsoft Sentinel — simulating a real production security operations environment.
Ran ransomware simulation (Infection Monkey) end-to-end: Wazuh detected C2 activity (T1105) and triggered real-time Slack alerts; XDR actively contained encryption that SIEM-only monitoring

Creating dashboards and automated reports with Google Data Studio and extracting data from SQL databases — skills applied directly to the design of SIEM dashboards and the analysis of security logs.

24/7 SOC: real-time alert monitoring with Wazuh SIEM; triage and investigation of low- and medium-severity incidents following escalation procedures. Analyzed network, firewall, endpoint and server logs to detect anomalies; reviewed malicious samples and enriched IOCs with VirusTotal. Escalated critical threats and maintained incident documentation, runbooks and risk matrices.

- Real-time monitoring of security alerts using Wazuh SIEM in a 24/7 SOC environment; investigation and triage of low- and medium-severity incidents following standardized escalation procedures.
- Analysis of network, firewall, endpoint, and server logs to detect anomalous behavior; review of the source code of malicious samples using VS Code and enrichment of IOCs

Supported the implementation of cybersecurity programs across the Ibero-American region. Researched cyber threat trends in Latin America and the Caribbean, supported risk analysis and built risk matrices for regional projects, wrote technical and executive reports, and attended virtual meetings with experts and national authorities.

- Implementation of cybersecurity programs throughout the Ibero-American region
- Research on cybersecurity trends and threats in Latin America and the Caribbean
- Support in risk analysis and the creation of risk matrices for regional projects
- Drafting of technical or executive reports on cybersecurity issues
- Participation in virtual meetings with experts and authorities

- I handled customer inquiries in English and Spanish, efficiently resolving issues via phone, chat, and email.
- I maintained a high customer satisfaction rate (>90%) through empathetic service and effective problem-solving.
- I used CRM tools such as Zendesk.
- I consistently met KPIs such as response time and first-contact resolution.

Grade: 4

Activities and societies: Key training areas: - Offensive Security: Penetration testing, vulnerability analysis, and exploitation. - Defensive Security: Monitoring (SIEM), log analysis, and hardening.

An intensive program offering more than 300 hours of hands-on training based on the “learning by doing” methodology. Specialized training focused on incident response and the protection of critical infrastructure.

Jun 2026

Apr 2026 · Expires Apr 2028

Apr 2026

Mar 2026

Grade: 4

Activities and societies: An incubation program specializing in cybersecurity, launched by INCIBE (Spain’s National Cybersecurity Institute) and run at La Mina Startup in Linares. Training provided by active industry professionals: — SOC managers with experience in real-world operations — Founders and CTOs of cybersecurity companies — Specialists in cloud infrastructure and enterprise security

- Red team
- Blue team

Jun 2020

Jan 2020

Aug 2020 · Expired Aug 2023

Feb 2020 · Expired Feb 2022

May 2020 · Expired Nov 2021

Grade: 3.6

Activities and societies: - CTF - Hackathons

Three-year higher technical program (122 credits) in information security. Coursework covered ethical hacking, network, operating system and application security, routing and switching, digital forensics, cryptography, IT security auditing and security policy development, plus a final capstone project and 400 hours of professional internship. Degree issued in Spanish as "Tecnólogo en Seguridad Informática".

Aug 2019

Oct 2019