GEORGE MATEO
San Antonio,Texas
Summary
Proven track record in advancing cybersecurity initiatives with expertise in threat hunting and risk mitigation. Skilled in enhancing security operations through automation and comprehensive threat assessments. Experienced in proactively identifying threats and vulnerabilities using advanced techniques. History of optimizing security architectures and significantly reducing response times.
Overview
8
8
years of professional experience
1
1
Certification
Work History
Senior Threat Hunter
National Security Agency
San Antonio, TX
06.2023 - Current
- Waiting for prepublication review
Senior Cybersecurity Engineer
Homeserveusa
Norwalk, CT
02.2021 - 06.2023
- Implemented Automox, a cloud-based patching platform, automating patch remediation across operating systems and third-party software, achieving 90% increase in patch effectiveness.
- Evaluated and optimized security architecture, recommending enhanced tools and protocols to management for vulnerability mitigation.
- Conducted comprehensive security assessments and penetration tests, remediating 50% of guessable passwords in Active Directory.
- Designed and executed threat modeling to prioritize business risks, including table-top exercises that saved $20,000 in the security budget.
- Analyzed cyberattack tools, tactics, and procedures to proactively address potential threats.
- Implemented scalable security processes to enhance operational efficiency within security operations.
- Managed threat hunting operations, creating Indicators of Compromise/Indicators of Attack Surfaces (IOCS/IOAS) to strengthen endpoint security posture.
- Oversaw SAST and DAST engagements throughout SDLC to identify and mitigate vulnerabilities in CI/CD pipelines.
Threat Hunter
Eversource
Berlin, CT
10.2019 - 09.2021
- Conducted proactive threat-hunting using Splunk and CrowdStrike, leveraging MITRE ATT&CK techniques to detect tactics, techniques, and procedures (TTPs) associated with advanced persistent threats (APTs).
- Led automation projects by integrating behavioral analytics, anomaly detection, and log enrichment, enhancing SOC efficiency and reducing response times by 70%.
- Conducted routine hypothesis-driven threat hunts, utilizing TTP-based detection engineering and adversary emulation exercises to minimize dwell time and mitigate threats before exploitation.
- Performed Network Forensics by analyzing packet captures, NetFlow, and intrusion detection system (IDS) logs to identify lateral movement, command-and-control (C2) traffic, and data exfiltration attempts.
- Executed Endpoint Forensics to detect fileless malware, persistence mechanisms, and unauthorized access by analyzing event logs, registry modifications, and forensic artifacts.
- Conducted Memory Forensics using tools like Volatility to uncover rootkits, in-memory implants, and credential dumping techniques commonly associated with advanced adversaries.
- Developed and disseminated Cyber Threat Intelligence (CTI) reports, mapping adversary behaviors to MITRE ATT&CK, improving detection logic, and refining hunting methodologies to preemptively counter emerging threats.
- Collaborated closely with OT security engineers to implement behavior-based anomaly detection, increasing SCADA system visibility and preventing ICS-specific cyber threats targeting industrial control networks.
Cybersecurity Analyst
CareCentrix
Stamford, CT
05.2017 - 10.2019
- Fortified organizational security by reducing risks 20% through comprehensive assessments and countermeasures.
- Enhanced application security 25% by executing dynamic application security testing during continuous delivery phases.
- Led vulnerability management program to reduce attack surface of mission-critical applications 40%.
- Boosted vulnerability response efficiency 30% by developing custom scripts and automation tools.
- Conducted in-depth security assessments using STRIDE and PASTA to enhance security posture of applications.
- Collaborated with engineering team to proactively assess and improve security of critical applications.
- Resolved complex security breaches swiftly, maintaining a secure environment at 100% effectiveness.
Education
Graduate Degree - Artificial Intelligence and Machine Learning
Harvard University
Cambridge, Massachusetts10.2025
Master of Science - Homeland Security/Homeland Security
Southern New Hampshire University
Hooksett, NH05.2019
Graduate Certificate - Cybersecurity
Southern New Hampshire University
Hooksett, NH05.2019
Master of Science - Cybersecurity IT Management
Southern New Hampshire University
Hooksett, NH05.2019
Bachelor of Science - Criminal Justice
Post University
Waterbury, CT10.2014
Skills
- Endpoint Security
- Windows Forensics
- Linux
- Malware Analysis
- Python
- Reverse Engineering
- SCADA
- SDLC
- Security Operations
- Machine learning
- Threat Hunting
- Threat Intelligence
- Machine Learning
- Endpoint Forensics
- Network Forensics
- Incident Response
- AWS CloudWatch
- SOAR Automation
- AWS Terraform
- Splunk Engineering
- Azure
- GCP
Websites
Certification
- GIAC Certified Web Application Pentester
- SEC642 Advanced Web Application Pentesting
- GIAC Certified Incident Handler
- GIAC Certified Forensic Examiner
- GIAC Certified Forensic Analyst
- GIAC Certified Cloud Pentester
- GIAC Certified Enterprise Pentester
- GIAC Certified Network Forensic Analyst
- Certified Threat Hunter Apprentice 2 (NSA)
- Offensive Security Threat Hunter
- Offensive Security Wireless Professional
- Offensive Security Experienced Professional
Accomplishments
- GIAC Advisory Board, I obtained a high proficiency in a GIAC exam
- Patch Effectiveness Improvement, Achieved a 90% increase in patch effectiveness for third-party applications at Homeserveusa.
- SOC Efficiency Enhancement, Reduced response times by 70% through automation of SOC processes at Eversource.
- Security Budget Savings, Saved $20,000 in security budget by designing custom table-top exercises at HomeserveUSA.
- Vulnerability Management Success, Reduced attack surface by 40% through vulnerability management program at CareCentrix.
Timeline
Senior Threat Hunter
National Security Agency
06.2023 - Current
Senior Cybersecurity Engineer
Homeserveusa
02.2021 - 06.2023
Threat Hunter
Eversource
10.2019 - 09.2021
Cybersecurity Analyst
CareCentrix
05.2017 - 10.2019
Graduate Degree - Artificial Intelligence and Machine Learning
Harvard University
Master of Science - Homeland Security/Homeland Security
Southern New Hampshire University
Graduate Certificate - Cybersecurity
Southern New Hampshire University
Master of Science - Cybersecurity IT Management
Southern New Hampshire University
Bachelor of Science - Criminal Justice
Post University