Senior Security Engineer

Elena Vasquez

I break systems so attackers cannot.

Prague, Czech RepublicExplore the work

Case reports

REPORT / 01

Red Team Engagement — European Bank

Context: A major European bank needed to assess real-world attack resilience ahead of regulatory examination.
Work: Led a 6-week red team engagement simulating advanced persistent threat (APT) actor TTPs across physical, network, and application layers.
Outcome: Identified 3 critical vulnerabilities including an active directory misconfiguration enabling full domain compromise. All findings remediated before regulatory review.

Metasploit
Burp Suite
Python
Cobalt Strike

REPORT / 02

Cloud Security Architecture — FinTech Startup

Context: A Series B fintech was storing PII in unencrypted S3 buckets and had no security monitoring across their AWS environment.
Work: Designed and implemented a full AWS security architecture including GuardDuty, Security Hub, encrypted storage, and least-privilege IAM policies.
Outcome: Achieved SOC 2 Type II certification within 4 months. Zero security incidents in 18 months post-implementation.

AWS
Python
Terraform
Splunk

Professional statement

Senior Security Engineer with 6 years in offensive and defensive security. OSCP certified, specialising in red team operations, application security, and cloud security architecture. Previously at CrowdStrike and a Big 4 cybersecurity practice. Available for senior security roles and consulting engagements.

Education & credentials

Certifications

OSCP (Offensive Security Certified Professional)
CEH (Certified Ethical Hacker)
AWS Certified Security Specialty
CompTIA Security+

Skills & practice

Full-spectrum security practitioner comfortable across red team operations, cloud architecture review, and compliance frameworks.

Offensive

Penetration Testing
Metasploit
Burp Suite
Social Engineering

Defensive

SIEM
Splunk
Wireshark
IDS/IPS
Incident Response

Cloud Security

AWS Security
Azure Security
IAM
Cloud Config Review

Compliance

ISO 27001
NIST CSF
GDPR
SOC 2

Languages

Python
Bash
PowerShell
Go

Additional skills

NIST

Experience

2022 – 2024
Senior Security Engineer — Red Team
CrowdStrike
- Led red team operations for Fortune 500 clients across financial services and critical infrastructure
- Discovered and responsibly disclosed 4 CVEs in widely-used enterprise software
- Developed internal tooling for automated reconnaissance that reduced engagement setup time by 60%
2019 – 2022
Cybersecurity Consultant
PwC
- Delivered 30+ penetration tests and security audits for clients across banking, healthcare, and energy
- Led ISO 27001 implementation projects for 5 clients achieving first-time certification
- Presented security findings to C-suite and board-level stakeholders

Continue the conversation