Open to opportunities

Marco Aponte

@marcoaponte

Message

Senior cybersecurity consultant delivering penetration tests and security automation.

Paraguay

Message

What I'm looking for

I’m looking to lead penetration testing and Secure SDLC programs, automate security assessments with AI/RPA, and work with engineering teams to harden web, mobile, and infrastructure—while sharing insights through clear reporting and training.

I’m a senior cybersecurity professional with 13+ years in IT, combining research, product development, and infrastructure management with 10+ years executing penetration tests across web, mobile, and external/internal infrastructure. I’ve worked across multiple industries, including private and public banks, the Paraguayan ministry of health, and the Paraguayan air force.

I specialize in end-to-end security assessments: penetration testing, device hardening, social engineering assessments, malware analysis, and security reviews to identify vulnerabilities and evaluate their potential impact. I communicate findings clearly to technical teams, management, and executive stakeholders, ensuring remediation is validated and outcomes are actionable.

I also push security forward through automation and modern delivery practices. I’ve developed automation solutions for penetration testing and cybersecurity processes using scripting, AI, and RPA, and I’ve performed security architecture reviews for AI-driven applications while building AI-powered security automation tools for Secure SDLC processes.

Before focusing exclusively on security, I built strong infrastructure fundamentals—Linux-based systems, monitoring, VoIP, backup/recovery, and enterprise services—so I can assess risk with real operational context. I enjoy mentoring junior consultants, delivering cybersecurity awareness training, and presenting through webinars, workshops, and international conference presentations.

Experience

Work history, roles, and key accomplishments

Cybersecurity and Compliance Analyst

MentorMate

Oct 2024 - May 2026 (1 year 7 months)

Conducted external infrastructure and web application penetration testing and performed security architecture reviews for AI-driven applications. Built AI-powered security automation tools to strengthen Secure SDLC processes and expanded cybersecurity service offerings through assessments and technical presentations.

Web Application Security Security Architecture Review Secure SDLC AI Security Automation Security Assessments Technical Presentations

Cybersecurity Consultant

Oct 2015 - Sep 2024 (8 years 11 months)

Delivered external and internal infrastructure, web, mobile, and API penetration testing engagements across financial services, government, and retail. Performed social engineering assessments, malware analysis, and vulnerability validation, then advised technical and executive stakeholders with remediation and hardening recommendations while supporting IT audit and compliance assessments.

Penetration Testing Infrastructure Security Web Application Security Mobile Application Security API Testing Social Engineering Malware Analysis Security Consulting Risk Assessment Security Architecture

Senior Cybersecurity Consultant

Dec 2017 - Dec 2023 (6 years)

Conducted external and internal infrastructure, web, mobile, and API penetration testing engagements across financial services, government, and retail. Mentored junior consultants and delivered cybersecurity awareness training, workshops, webinars, and international conference presentations while providing hardening guidance and architecture recommendations.

Penetration Testing Web Application Security API Testing Mobile Application Security Security Architecture Security Consulting Security Awareness Training Mentoring Risk Assessment

IT Infrastructure Consultant

E-Services

Mar 2014 - Sep 2015 (1 year 6 months)

Deployed, configured, and maintained Linux-based infrastructure, monitoring, and VoIP solutions. Implemented Nagios and telephony platforms (FreePBX/Elastix), designed backup and recovery processes, and automated administration using Bash scripts to support production environments.

Linux Administration Infrastructure Monitoring Nagios Elastix VoIP Backup And Recovery Bash Scripting Network Support Automation

Systems & Infrastructure Engineer

Netvision

Jun 2012 - Feb 2014 (1 year 8 months)

Administered Linux-based infrastructure supporting networking, hosting, email, and enterprise services. Implemented and maintained firewall, proxy, monitoring, VoIP, and messaging solutions, and built automation scripts and backup solutions to improve operational efficiency and system reliability.

Linux Administration CentOS Network Administration Infrastructure Monitoring VoIP Infrastructure Automation Backup And Recovery