# Maximiliano Medina Maximiliano Medina is a remote worker on Himalayas, SOC Analyst | Security Automation (SOAR) & Detection Engineering at Telecentro, based in Argentina. Source: https://himalayas.app/@maximilianomedina1 ```text SOC Analyst at Telecentro building n8n security automations to enrich and score alerts. ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | Argentina | | Authorized to work in | Argentina | | Salary expectations | 30k+ USD | | Job categories | SOC Analyst, Security Automation Engineer, Detection Engineer, Threat Hunter | | Skills | SOC Operations, Security Automation, SOAR, Detection Engineering, Alert Triage, Incident Response, Threat Hunting, Threat Intelligence, IOC Analysis, TTP Analysis, MITRE ATT&CK, Use Case Design, Detection Rule Development, Phishing Analysis, Malware Analysis | | LinkedIn | https://linkedin.com/in/maximilianomedina-87110796 | ## About ```text At Telecentro, I build n8n SOAR automations that integrate Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar, and Microsoft Teams to automate alert triage and reduce response times. I also design enrichment and scoring pipelines to classify alerts and reduce false positives. At Accenture, I led Threat Hunting initiatives and designed a custom framework. I built queries and use cases in Splunk, CrowdStrike, and QRadar, and helped translate threat intelligence into actionable detections. Earlier, I supported security operations across airline and financial environments, including SWIFT. I co-designed MITRE ATT&CK-aligned use cases, hunted IOCs, and optimized incident response workflows with XSOAR. ``` ## Experience ### SOC Analyst | Security Automation (SOAR) & Detection Engineering (current) Telecentro. Oct 2025 - Present ```text Builds SOAR automations in n8n integrating Carbon Black EDR, IRIS, VirusTotal, MalwareBazaar and Microsoft Teams to automate alert triage and reduce response times. Designs automated threat enrichment and scoring pipelines to classify alerts and reduce false positives. ``` Skills: N8n, Carbon-Black-EDR, DFIR-IRIS, Virus-Total, MalwareBazaar, Microsoft-Teams, RSA-NetWitness, Threat-Hunting, Sigma, YARA, IDS, Phishing-Analysis ### Threat Hunter Lead [Accenture](https://himalayas.app/companies/accenture). Mar 2023 - Oct 2025 ```text Led Threat Hunting initiatives against advanced threats, building risk-based hypotheses and testing TTPs with Cymulate. Analyzed threat actors and malware, feeding intelligence into incident response and designing a custom Threat Hunting framework. ``` Skills: Threat-Hunting, Cymulate, LockBit, Gamaredon, Medusa, QakBot, IcedID, RaccoonStealer, Splunk, Crowdstrike, QRadar, Qualys, MITRE-ATT&CK, IOC, TTP ### SOC Analyst L2, Strategic Project for an International Airline [Accenture](https://himalayas.app/companies/accenture). Dec 2021 - Mar 2023 ```text Led security operations and process improvement for a global airline, managing a team of 6 analysts. Hunted and mitigated IOCs in real time with CrowdStrike and QRadar, and co-designed MITRE ATT&CK-aligned detection use cases. ``` Skills: Crowdstrike, QRadar, XSOAR, Cisco-Stealthwatch, MITRE-ATT&CK, Team-Leadership, Incident-Response ### SOC Analyst L2, Multinational Financial Institution [Accenture](https://himalayas.app/companies/accenture). Aug 2021 - Mar 2023 ```text Mentored and supervised Level 1 analysts, performed Threat Hunting in Splunk and IOC searches across Symantec EDR, Arbor, F5 and DarkTrace. Designed use cases for the SWIFT environment and custom dashboards for security cells. ``` Skills: Splunk, Symantec-EDR, Arbor, Darktrace, Dridex, TrickBot, Emotet, AgentTesla, Swift, MITRE-ATT&CK, Microsoft-Teams ### SOC Analyst L1 RANSecurity. Oct 2020 - Jul 2021 ```text Monitored McAfee ePO, McAfee SIEM, McAfee ATD and BlackBerry Cylance, building queries and client reports. Managed Clearswift SECURE Email Gateway and analyzed malware with VirusTotal and Hybrid Analysis. ``` Skills: McAfee-EPO, SIEM, McAfee-Advanced-Threat-Defense, Cylance, Clearswift, Virus-Total, Hybrid-Analysis, Malware-Analysis ### IT Help Desk L1–L2 SanCorSalud. Mar 2018 - Oct 2020 ```text Administered G Suite and Active Directory on Windows Server, monitored Fortinet VPN/MPLS networks, and provided Windows 10, Office, Android, Lexmark printer and Dell hardware support. ``` Skills: Google-Workspace, Active-Directory, Windows-Server, Fortinet, VPN, MPLS, Windows-10, Office, Android, Lexmark, Dell ### Onsite IT Support [Coty Inc.](https://himalayas.app/companies/coty). Oct 2015 - Oct 2017 ```text Supported 40+ users onsite with Windows 7/10, Office 365, OneDrive, Lync and Salesforce. Managed AD user provisioning, IBM backup tapes, Veeam and CA Server monitoring, and hardware inventory. ``` Skills: Win7, Windows-10, Office-365, One-Drive, Lync, Salesforce, Active-Directory, IBM, Veeam, CA-Server, Hardware-Asset-Management ### Services Support 3 (HSBC & QBE Seguros accounts) [Unisys](https://himalayas.app/companies/unisys). Nov 2014 - Sep 2015 ```text Handled bank staff tickets in CA Service Desk Manager, AD and AS400 unlocks, Lotus Notes, Citrix/VPN access and VMware VM management. ``` Skills: CA-Service-Desk-Manager, Active-Directory, AS-400, Lotus-Notes, Citrix, VPN, VMWare ### Junior Analyst, Telefónica Argentina Project [Atento](https://himalayas.app/companies/atento). Jan 2011 - Dec 2014 ```text Provided business telecom support including basic telephony, VoIP, 0800 lines, digital trunks and ADSL. ``` Skills: Telephony, VoIP, DSL, Telecom-Support ### Technical Support BairesData. Mar 2010 - Mar 2011 ```text Assembled PCs, installed operating systems, set up small networks and performed backups and disk cloning. ``` Skills: PC-Assembly, OS-Installation, Networking, Backup, Disk-Cloning ## Education ### José M. Moreno High School Diploma, General Studies. 2013 - 2015 ```text Completed high school education at José M. Moreno from 2013 to 2015. ``` ### Colegio Nº 6 D.E. 2 Manuel Belgrano Secondary Education, General Studies. 2005 - 2010 ```text Attended Colegio Nº 6 D.E. 2 Manuel Belgrano from 2005 to 2010. ``` ## Tech stack - Splunk - Salesforce - F5 - Microsoft Teams - Java - Linux - Windows - Windows Server - Qualys - CrowdStrike - RSA NetWitness - Arbor - Citrix - N8N - VirusTotal - Fortinet To contact Maximiliano, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Ruben Emanuel Fernandez](https://himalayas.app/@rubenemanuelfernandez): Cyber Security Engineer, Bank of Cordoba - [Abigail Kauf](https://himalayas.app/@abigailkauf): Security Architect & AppSec Eng, Paramo Technologies - [Fausto User](https://himalayas.app/@faustouser): Semi Senior Network Security, PwC Acceleration Centers - [Charlotte IBAÑEZ](https://himalayas.app/@charlotteibanez): SOC Analyst Intern, Sopra Steria - [Maximiliano Medina](https://himalayas.app/@maximilianomedina): Cloud and Infrastructure Endpoint Engineer, Netrix Global - [Joel A Portales](https://himalayas.app/@joelaportales): Soporte Técnico N2 / Infraestructura & Ciberseguridad, REBA - [Evar Vargas](https://himalayas.app/@evarvargas): Analista General de Seguridad Gobierno Ssr, Telefónica Argentina SA - [Daniel Mendoza](https://himalayas.app/@danielmendoza): Especialista en Operaciones de Seguridad / Analista de Seguridad, ADT (Johnson Controls) - [Felipe Alborch de Guzman](https://himalayas.app/@felipealborchdeguzma): Analista de Ciberseguridad, Accusys Technology - [Genaro Scarpato](https://himalayas.app/@genaroscarpato): Data Entry, Bayton Group