Open to opportunities

Roberto Castillo

@robertocastillo

Message

Experienced OT/ICS cybersecurity engineer specializing in DFIR and resilience.

Philippines

Message

What I'm looking for

I seek roles securing OT/ICS environments where I can lead defensive design and incident response, work with cross-functional global teams, and advance resilience for critical infrastructure.

I am an Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity professional with extensive hands-on experience designing and implementing defense-in-depth solutions for power, water, and industrial clients across the Middle East, Africa and the Philippines.

I specialize in endpoint protection, application whitelisting, secure remote access, asset and vulnerability management, backup and recovery, log collection and security monitoring, and system/network hardening aligned to NIST, ISA/IEC 62443 and other industry standards.

My background includes digital forensics, incident response, threat hunting, recon/OSINT and security monitoring within global crisis and incident response teams, and I have led multiple OT cybersecurity improvements and FEED/FAT/SAT engagements for large-scale facilities.

I hold multiple certifications (including CISSP, CySA+, Dragos DPCU, Claroty CCA, PCCET and others), and I bring proven experience integrating virtualization, cloud, SIEM and endpoint management technologies to improve cyber resilience for critical infrastructure environments.

Experience

Work history, roles, and key accomplishments

Current

Security Delivery Associate Manager

Current

Accenture Philippines, Inc.

Aug 2022 - Present (3 years 2 months)

Design and implement OT/ICS defense-in-depth cybersecurity solutions for global clients, delivering endpoint protection, application whitelisting, asset/vulnerability management and secure remote access for power and water projects in Saudi Arabia.

ICS OT Security Endpoint Protection Vulnerability Management Remote Access DFIR Threat Hunting SIEM

OT Cybersecurity Engineer

Emerson Automation Solutions - PSS

Feb 2019 - Sep 2020 (1 year 7 months)

Designed and implemented secure infrastructure and OT cybersecurity solutions across MEA, delivering McAfee ePO deployments, application whitelisting, network/system hardening, backup/recovery and SIEM integrations for multiple energy projects.

OT Security Systems System Hardening Backup SIEM IDS FAT SAT

IT Service Delivery Lead

Emerson Automation Solutions - ITSS

Jan 2018 - Jan 2019 (1 year)

Managed regional IT infrastructure support across Qatar, Kuwait and Iraq, enforced security policies, and improved vulnerability/patch posture using LANDesk and Qualys to reduce attack surface.

IT Service Delivery Qualys WSUS Incident Management

IT Server & Systems Administrator

Emerson Automation Solutions - ITSS

Mar 2016 - Apr 2018 (2 years 1 month)

Managed and secured physical and virtual servers for MEA offices, implemented Hyper-V virtualization and site-to-site replication to enable disaster recovery and reduce local resource needs.

Windows Server Hyper V Virtualization WSUS Disaster Recovery

IT Client Technologies Specialist

Emerson Automation Solutions - ITSS

Mar 2011 - Mar 2016 (5 years)

Provided Tier 2 support for desktops, mobile and networked devices, acted as local security analyst conducting DFIR tasks including forensic imaging, IOC remediation and collaboration with CIRT.

Digital Forensics DFIR Autopsy SCCM Troubleshooting

Technical Support Specialist

Du - Emirates Integrated Telecommunication Co.

Oct 2009 - Mar 2011 (1 year 5 months)

Delivered multi-tier technical support across NOC, SOC, call centers and corporate offices for ~2000 users, resolving network, desktop and VPN issues and supporting tools like SCCM and Symantec SEP.

Technical Support NOC SOC Support VPN SCCM Customer Service

Junior IT Technician

Emirates Group IT

Jun 2008 - Oct 2009 (1 year 4 months)

Supported rollout and maintenance of SABRE GDS across 250 ticketing offices, performing preventive maintenance, configuration and rapid restoration to meet SLAs.

Troubleshooting SLA Management