Looking for a job

Santiago Antonelli

@santiagoantonelli

Message

Senior DevSecOps Engineer at CloudLegion - OSDE who cut vulnerability remediation time by 40%.

Argentina

Message

At CloudLegion - OSDE, I led a redesign of the vulnerability remediation process that reduced MTTR by 40% across multiple development teams. I also integrated and maintained SAST, DAST, and SCA controls in multicloud CI/CD pipelines.

At INSSIDE - Proyecto Arcos Dorados, I led strategic migrations to Cloudflare, configuring custom WAF rules and Layer 7 DDoS mitigation. I also conducted architecture and code reviews to identify security gaps before production.

At PWC, I led identity implementation and management initiatives using SailPoint, ForgeRock, and Azure AD, and worked on vulnerability detection and remediation programs. Earlier, at Solution Box S.R.L, I participated in payment-structure changes and maintained web applications and system connections.

Experience

Work history, roles, and key accomplishments

Current

Senior DevSecOps

Current

CloudLegion - OSDE

Jan 2024 - Present (2 years 9 months)

Led the redesign of the vulnerability remediation process, reducing MTTR by 40% across multiple development teams. Integrated and maintained SAST, DAST, and SCA controls within multicloud CI/CD pipelines.

SAST DAST SCA Veracode SonarQube OWASP ZAP Trivy AWS Azure GCP CI CD Kubernetes Terraform Ansible Jenkins Gitlab CI Secure Coding DevSecOps

Senior DevSecOps

INSSIDE - Proyecto Arcos Dorados

Sep 2023 - Dec 2023 (3 months)

Led strategic migrations to Cloudflare, configuring custom WAF rules and Layer 7 DDoS attack mitigation. Conducted comprehensive architecture and code reviews, identifying critical security gaps before production deployment.

Cloudflare WAF DDoS Mitigation Security Auditing Architecture Reviews Code Review

Cibersecurity Senior Analyst

PWC

Mar 2022 - Sep 2023 (1 year 6 months)

Led identity implementation and management initiatives using SailPoint, ForgeRock, and Azure AD, ensuring identity lifecycle governance and compliance. Designed and audited security policies based on operational risks, and executed large-scale vulnerability detection and prioritization programs.

IAM Sailpoint ForgeRock Azure AD Risk Management Policy Management Vulnerability Management Rapid7 Tenable Qualys Secure Architecture

FullStack Developer

Solution Box S.R.L

Jan 2022 - Mar 2022 (2 months)

Web development and maintenance. Participated in the design and implementation of changes to the payment structure, and performed database and system connection updates and maintenance.

Web Development Payment Systems Database Management System Maintenance