Nicaury Francisco Ramirez
Verified Expert in Engineering
Security Engineer and Developer
Santiago De Los Caballeros, Santiago Province, Dominican Republic
Toptal member since November 2, 2022
Nicaury is a security engineer with 7+ years of experience in information security, cybersecurity, and systems administration. She has worked in fast-paced, remote environments for a couple of years, developing excellent communication and leadership skills. Nicaury is a certified professional with proven problem-solving and analytical skills, a fast learning curve, and the ability to adapt to any team.
Portfolio
Experience
- Unified Endpoint Security (UES) - 7 years
- Vulnerability Management - 7 years
- Security Policies & Procedures - 6 years
- IT Security - 6 years
- ISO 27001 - 6 years
- Risk Assessment - 6 years
- Security - 6 years
- Penetration Testing - 4 years
Preferred Environment
Linux, Amazon Web Services (AWS), Web Security, Vulnerability Management, Terraform, Secure Containers, Fortinet Firewall Configuration, ASA Firewalls, Windows Server, Secure Code Best Practices
The most amazing...
...project I've been in charge of was an enterprise's endpoint encryption tool, in which I kept 99% of endpoints securely encrypted every month.
Work Experience
Information Security Engineer (via Toptal)
GeneDx, LLC c/o Sema4
- Contributed to the development of a cybersecurity governance program.
- Managed the vulnerability scanner, endpoint security and response (EDR), and security information and event management (SIEM) solutions.
- Increased the security posture of multiple cloud and on-premises services.
Security Engineer
First American Title
- Provided tier-3 support to analysts in managing and troubleshooting endpoint security tools.
- Performed vulnerability assessment reports and coordinated the implementation of remediation activities.
- Implemented and documented required procedures to add new security tools to support the business.
- Helped developers keep the software development lifecycle secure.
- Developed a secure architecture design for the enterprise to be used as a standard.
- Leveraged infrastructure-as-code practices to maintain efficiency and version control of changes.
Information Security Analyst
First American Title
- Implemented security rules and policies in cloud environments like Azure and AWS and firewalls like Palo Alto and Cisco ASA.
- Solved network and security incidents in Azure, AWS, Palo Alto, and Cisco ASA.
- Took part in on-call rotation to keep business running in case of incidents during off-business hours.
Security Analyst
9-1-1 Dominican Republic
- Maintained 99% of the company's EDR solution endpoints fully protected.
- Provided guidance and second-level support to newer team members, training them in the security solutions and tools we manage.
- Led the development and application of security policies, standards, and procedures.
- Architectured the network security, access, event monitoring, and response policies.
- Managed servers and systems as part of the IT department and cybersecurity team.
- Protected the company's information assets by ensuring compliance with the rules and procedures for accessing the information systems.
Quality Assurance (QA) Analyst
Intellisys D. Corp.
- Tested web applications to ensure they met all the product owner's quality requirements and that security best practices were accomplished.
- Maintained Docker containers to replicate the environments and test the applications' behavior.
- Helped in the configuration and maintenance of equipment for the proper network operation.
Experience
Development of Security Standards and Procedures
Antimalware Tool Implementation
Internal Penetrating Testing
Education
Bachelor's Degree in Telecommunications
Pontificia Universidad Católica Madre y Maestra (PUCMM) - Santiago de los Caballeros, Dominican Republic
Certifications
CISSP - Certified Information Systems Security Professional
ISC2
AWS Solutions Architect – Associate
Amazon Web Services
Microsoft Certified: Security, Compliance, and Identity Fundamentals
Microsoft
Certified Incident Handler (ECIH)
EC-Council
AWS Certified Cloud Practitioner
AWS
Certified Ethical Hacker (CEH)
EC-Council
CompTIA CySA+
CompTIA
CompTIA Security+
CompTIA
CompTIA Linux+
CompTIA
CCNA CyberOps
Cisco
Cisco Certified Entry Networking Technician
Cisco
Skills
Tools
Logging, Terraform, Sumo Logic, VPN, SonarQube
Languages
Bash, Python 3, Bash Script, SAML
Paradigms
Penetration Testing, DevSecOps, Secure Code Best Practices, Role-based Access Control (RBAC), Continuous Development (CD), Security Software Development, Continuous Integration (CI), DevOps, Automation
Platforms
Linux, Windows Server, Windows, Docker, Amazon Web Services (AWS), QualysGuard, Azure, SentinelOne
Industry Expertise
Cybersecurity
Storage
Microsoft Entra ID, Azure Active Directory
Frameworks
Windows PowerShell, Selenium
Other
Vulnerability Management, Fortinet Firewall Configuration, ASA Firewalls, Vulnerability Assessment, Security, Security Policies & Procedures, Secure Software Development Lifecycle (SSDLC), IT Security, Risk Assessment, SecOps, Web Application Firewall (WAF), ISO 27001, Unified Endpoint Security (UES), Cybersecurity Operations, Security Audits, Application Security, Access Control, Cloud Platforms, Information Security Management Systems (ISMS), Endpoint Protection, Network Security, Security Engineering, Security Monitoring, Firewalls, Web Security, Security Architecture, Vulnerability Identification, Cloud, OWASP, Containers, Threat Modeling, SOC 2, Managed Security Service Providers (MSSP), Release Management, Cloud Architecture, Tanium, Security Information and Event Management (SIEM), Documentation, Artificial Intelligence (AI), AWS Cloud Security, Software Development Lifecycle (SDLC), Infrastructure, Cloud Infrastructure, IDS/IPS, System Administration, Secure Containers, Encryption, Antivirus Software, Cisco, Palo Alto Networks, Symantec, Ethical Hacking, Certified Ethical Hacker (CEH), Networking, IP Routing, Analysis, SIEM, System-on-a-Chip (SoC), User Permissions, IoT Security, Computer Science, Electronics, Programming, Software Development, IT Networking, Malware Analysis, APIs, Server Management, AWS Cloud Architecture, Cloud Security, Incident Response, Incident Management, Identity & Access Management (IAM), CISSP, CISM, NIST, Single Sign-on (SSO), Ransomware Attack Response, Data Breach Response, Security Breach Consulting, Security Management, Security Alignment to Business, Proxies
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring