Open to opportunities

Rafael Carela

@rafaelcarela

Message

Cybersecurity Analyst specializing in fraud detection, threat hunting, and incident response.

United States

Message

What I'm looking for

I’m looking for a role where I can protect regulated environments by leading fraud detection, threat hunting, and incident response—using SIEM/EDR and vulnerability management—to continuously improve security workflows in a collaborative team.

I’m a cybersecurity professional with over 20 years of experience protecting enterprise, financial, and regulated environments through security administration, threat detection, incident response, vulnerability management, phishing analysis, and risk reduction.

Currently, I serve as a Security Administrator at Assurant, collaborating with infrastructure, cloud, and support teams to resolve security issues, manage access controls and authentication requirements, maintain security documentation, and strengthen enterprise security processes across cloud and hybrid environments.

Previously, I spent nearly 12 years as an Information Security Analyst at Banesco USA, monitoring security events with IBM QRadar SIEM, investigating suspicious activity and phishing attempts, supporting incident response and remediation, and performing vulnerability assessments with Qualys VMDR while coordinating fixes with technical teams. I also administered and supported CrowdStrike Falcon, ran user awareness with KnowBe4, produced investigation and audit evidence, and communicated findings clearly to technical and nontechnical stakeholders.

Experience

Work history, roles, and key accomplishments

Current

Security Administrator

Current

Assurant

Jun 2024 - Present (2 years 1 month)

Administered enterprise security processes, including managing user access/authentication requirements and maintaining security documentation for cloud and hybrid environments. Collaborated with infrastructure, cloud, help desk, and application teams to resolve security issues and support access reviews, compliance, audit, and data protection needs.

Access Control Authentication Security Policy Management Security Documents Microsoft Azure Microsoft 365 Active Directory Windows Security Awareness Access Reviews Data Protection

Information Security Analyst

Banesco USA

Sep 2012 - Jun 2024 (11 years 9 months)

Monitored security events and investigated suspicious activity, phishing attempts, and potential fraud indicators in a regulated banking environment. Supported incident response and vulnerability management using security tools, produced investigation and audit documentation, and collaborated with technical, audit, and compliance teams.

Security Events IBM QRadar SIEM Security Investigations Phishing Analysis Incident Response Vulnerability Management CrowdStrike Falcon EDR Endpoint Detection And Response KnowBe4 Phishing Awareness Technical Documentation PCI DSS Access Reviews Security Training

Network Administrator / PM

APER Construction

Jul 2011 - Sep 2012 (1 year 2 months)

Provided system administration and network security support, including maintaining Windows Server and Google Workspace environments. Installed and configured network security and communication equipment, monitored network activity for irregularities, performed manual security testing, and managed user accounts, permissions, and backups.

Windows Server Google Workspace Network Security Firewall Administration Switch Configuration Wireless Equipment Setup Network Monitoring Manual Testing User Account Management Permissions Management Backup Troubleshooting Infrastructure Maintenance

Senior Network Analyst

17th Judicial Circuit Court of Florida

Sep 2004 - Jul 2011 (6 years 10 months)

Supported critical government systems and network infrastructure by monitoring TCP/IP activity and investigating irregular network events. Installed, configured, maintained, and upgraded workstations, servers, network devices, and security systems, and documented procedures, investigative findings, and resolutions.

Network Monitoring Network Device Installation And Upgrades Technical Documentation Procedure Development For Device Detection Infrastructure Modernization